Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 98

Question list

List of questions

Question 971

(0)

Which of the following is the BEST method of creating risk awareness in an organization?

Question 972

(0)

A bank recently incorporated Blockchain technology with the potential to impact known risk within the organization. Which of the following is the risk practitioner's BEST course of action?

Question 973

(0)

When developing risk scenario using a list of generic scenarios based on industry best practices, it is MOST imported to:

Question 974

(0)

Which of the following would be a risk practitioner's GREATEST concern with the use of a vulnerability scanning tool?

Question 975

(0)

Which of the following is the PRIMARY reason to perform periodic vendor risk assessments?

Question 976

(0)

Which of the following is the MOST important objective from a cost perspective for considering aggregated risk responses in an organization?

Question 977

(0)

Which of the following is MOST helpful in providing an overview of an organization's risk management program?

Question 978

(0)

Effective risk communication BEST benefits an organization by:

Question 979

(0)

Which of the following is the BEST control to minimize the risk associated with scope creep in software development?

Question 980

(0)

An organization has recently hired a large number of part-time employees. During the annual audit, it was discovered that many user IDs and passwords were documented in procedure manuals for use by

Question 971

Which of the following is the BEST method of creating risk awareness in an organization?

Marking the risk register available to project stakeholders

Ensuring senior management commitment to risk training

Providing regular communication to risk managers

Appointing the risk manager from the business units

Show Answer Comment (0)

Question 972

A bank recently incorporated Blockchain technology with the potential to impact known risk within the organization. Which of the following is the risk practitioner's BEST course of action?

Determine whether risk responses are still adequate.

Analyze and update control assessments with the new processes.

Analyze the risk and update the risk register as needed.

Conduct testing of the control that mitigate the existing risk.

Show Answer Comment (0)

Question 973

When developing risk scenario using a list of generic scenarios based on industry best practices, it is MOST imported to:

Assess generic risk scenarios with business users.

Validate the generic risk scenarios for relevance.

Select the maximum possible risk scenarios from the list.

Identify common threats causing generic risk scenarios

Show Answer Comment (0)

Question 974

Which of the following would be a risk practitioner's GREATEST concern with the use of a vulnerability scanning tool?

Increased time to remediate vulnerabilities

Inaccurate reporting of results

Increased number of vulnerabilities

Network performance degradation

Show Answer Comment (0)

Question 975

Which of the following is the PRIMARY reason to perform periodic vendor risk assessments?

To provide input to the organization's risk appetite

To monitor the vendor's control effectiveness

To verify the vendor's ongoing financial viability

To assess the vendor's risk mitigation plans

Show Answer Comment (0)

Question 976

Which of the following is the MOST important objective from a cost perspective for considering aggregated risk responses in an organization?

Prioritize risk response options

Reduce likelihood.

Address more than one risk response

Reduce impact

Show Answer Comment (0)

Question 977

Which of the following is MOST helpful in providing an overview of an organization's risk management program?

Risk management treatment plan

Risk assessment results

Risk management framework

Risk register

Show Answer Comment (0)

Question 978

Effective risk communication BEST benefits an organization by:

helping personnel make better-informed decisions

assisting the development of a risk register.

improving the effectiveness of IT controls.

increasing participation in the risk assessment process.

Show Answer Comment (0)

Question 979

Which of the following is the BEST control to minimize the risk associated with scope creep in software development?

An established process for project change management

Retention of test data and results for review purposes

Business managements review of functional requirements

Segregation between development, test, and production

Show Answer Comment (0)

An organization has recently hired a large number of part-time employees. During the annual audit, it was discovered that many user IDs and passwords were documented in procedure manuals for use by the part-time employees. Which of the following BEST describes this situation?

Threat

Risk

Vulnerability

Policy violation

Show Answer Comment (0)

Total 1.200 questions