Question 1031 · 1449 in bank
Which of the following controls will BEST detect unauthorized modification of data by a database administrator?
Show answer
Answer: D
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following controls will BEST detect unauthorized modification of data by a database administrator?
Answer: D
Which of the following is the PRIMARY purpose of periodically reviewing an organization's risk profile?
Answer: C
Which of the following risk register updates is MOST important for senior management to review?
Answer: A
Avoiding a risk that was previously accepted means that a risk that was previously deemed acceptable or tolerable has now become unacceptable due to changes in the environment or circumstances. This update indicates that the organization's risk posture has changed and that new controls or risk mitigation strategies may need to be implemented. This update should be reviewed by senior management to ensure that the organization's risk management approach remains effective and that appropriate actions are taken to address the newly identified risk. Extending the date of a future action plan by two months, while important, is not as critical as the update related to avoiding a risk that was previously accepted. This update does not indicate a change in the risk posture of the organization, but rather a delay in the implementation of a planned action. While delays may have an impact on the organization's ability to mitigate risk, they do not necessarily require immediate attention from senior management unless they significantly impact the organization's ability to achieve its objectives.
Source: Adapted from community discussion — john_boogieman
Which of the following is the PRIMARY reason for a risk practitioner to use global standards related to risk management?
Answer: A
A risk practitioner is assisting with the preparation of a report on the organization's disaster recovery (DR) capabilities. Which information would have the MOST impact on the overall recovery profile?
Answer: A
While evaluating control costs, management discovers that the annual cost exceeds the annual loss expectancy (ALE) of the risk. This indicates the:
Answer: B
Which of the following should be the PRIMARY consideration when assessing the automation of control monitoring?
Answer: C
Agree with C. The question is about the automation of monitoring, not automation of the control. If you add automated monitoring without concern for cost, it can take the overall cost of the control over the cost of the impact.
Source: Adapted from community discussion — CbtL
Which of the following is the FIRST step in managing the risk associated with the leakage of confidential data?
Answer: D
The policy and the classification allow establishing the criteria to identify the confidential information and the protection measures, without this, awareness-raising activities cannot be initiated.
Source: Adapted from community discussion — john_boogieman
Which of the following would BEST ensure that identified risk scenarios are addressed?
Answer: D
The MOST effective approach to prioritize risk scenarios is by:
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1031. 1449 questions available.
Version 1.0.0. How we source questions