CRISC practice questions 1,121–1,130

1. Question 1121 · 1449 in bank

   Which of the following techniques would be used during a risk assessment to demonstrate to stakeholders that all known alternatives were evaluated?

   • AControl chart
   • BTrend analysis
   • CSensitivity analysis
   • DDecision tree

   Show answer

   Answer: D

   Explanation

   The control chart is a graph used to study how a process changes over time. A Decision Tree Analysis is a graphic representation of various alternative solutions that are available to solve a problem. Hence the correct solution is Decision tree. Happy to hear from other experts.

   Source: Adapted from community discussion — maheshexam

   Next question

2. Question 1122 · 1449 in bank

   Which of the following will BEST help mitigate the risk associated with malicious functionality in outsourced application development?

   • AUtilize the change management process.
   • BValidate functionality by running in a test environment.
   • CPerform an in-depth code review with an expert.
   • DImplement a service level agreement.

   Show answer

   Answer: C

   Next question

3. Question 1123 · 1449 in bank

   After a risk has been identified, who is in the BEST position to select the appropriate risk treatment option?

   • AThe risk practitioner
   • BThe risk owner
   • CThe control owner
   • DThe business process owner

   Show answer

   Answer: B

   Explanation

   The risk owner is in the best position to select the appropriate risk treatment option because they have a clear understanding of the risk and its potential impact on the organization. They are also responsible for managing the risk and have the authority to make decisions on how to treat it.

   Source: Adapted from community discussion — Boubou480

   Next question

4. Question 1124 · 1449 in bank

   Which of the following is the MOST important requirement for monitoring key risk indicators (KRIs) using log analysis?

   • ACollecting logs from the entire set of IT systems
   • BProviding accurate logs in a timely manner
   • CImplementing an automated log analysis tool
   • DObtaining logs in an easily readable format

   Show answer

   Answer: B

   Next question

5. Question 1125 · 1449 in bank

   Who is the MOST appropriate owner for newly identified IT risk?

   • AThe manager responsible for IT operations that will support the risk mitigation efforts
   • BThe individual with the most IT risk-related subject matter knowledge
   • CThe individual with authority to commit organizational resources to mitigate the risk
   • DA project manager capable of prioritizing the risk remediation efforts

   Show answer

   Answer: C

   Explanation

   Because the individual with authority to commit organizational resources is responsible for making decisions and allocating resources to address the IT risk. This person has the power to ensure that necessary resources and efforts are put into place to mitigate the risk effectively.

   Source: Adapted from community discussion — Boubou480

   Next question

6. Question 1126 · 1449 in bank

   A risk practitioner is organizing risk awareness training for senior management. Which of the following is the MOST important topic to cover in the training session?

   • ASenior management allocation of risk management resources
   • BSenior management roles and responsibilities
   • CThe organization's strategic risk management projects
   • DThe organization's risk appetite and tolerance

   Show answer

   Answer: B

   Explanation

   The most important topic to cover in a senior management risk awareness training session is senior management's roles and responsibilities related to risk management (option B). Senior leadership sets the tone for the entire organization's culture and posture towards risk. Clearly defining expectations around senior management's direct responsibilities for risk oversight, decision-making, resource allocation, and modeling behaviors will have the greatest impact.

   Source: Adapted from community discussion — Kennethlim79

   Next question

7. Question 1127 · 1449 in bank

   An IT license audit has revealed that there are several unlicensed copies of commercial applications installed on company laptops. The risk practitioner's BEST course of action would be to:

   • Aimmediately uninstall the unlicensed software from the laptops.
   • Bprocure the requisite licenses for the software to minimize business impact.
   • Creport the issue to management so appropriate action can be taken.
   • Dcentralize administration rights on laptops so that installations are controlled.

   Show answer

   Answer: C

   Explanation

   C. centralize administration rights on laptops so that installations are controlled is a remediating option of firstly reporting the issue for remendation to take place.

   Source: Adapted from community discussion — helg420

   Next question

8. Question 1128 · 1449 in bank

   Which of the following roles would be MOST helpful in providing a high-level view of risk related to customer data loss?

   • ACustomer database manager
   • BAudit committee
   • CData privacy officer
   • DCustomer data custodian

   Show answer

   Answer: C

   Next question

9. Question 1129 · 1449 in bank

   Which of the following BEST indicates effective information security incident management?

   • AFrequency of information security incident response plan testing
   • BPercentage of high risk security incidents
   • CMonthly trend of information security-related incidents
   • DAverage time to identify critical information security incidents

   Show answer

   Answer: D

   Next question

10. Question 1130 · 1449 in bank

    Which of the following is the BEST key performance indicator (KPI) to measure the effectiveness of a disaster recovery plan (DRP)?

    • APercentage of issues resolved as a result of DRP testing
    • BNumber of users that participated in the DRP testing
    • CNumber of issues identified during DRP testing
    • DPercentage of applications that met the recovery time objective (RTO) during DRP testing

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CRISC practice, question 1121. 1449 questions available.