CRISC practice questions 1,161–1,170

1. Question 1161 · 1449 in bank

   Which of the following should be the PRIMARY focus of a risk owner once a decision is made to mitigate a risk?

   • ADetermining processes for monitoring the effectiveness of the controls
   • BConfirming to management the controls reduce the likelihood of the risk
   • CUpdating the risk register to include the risk mitigation plan
   • DEnsuring that control design reduces risk to an acceptable level

   Show answer

   Answer: D

   Next question

2. Question 1162 · 1449 in bank

   Which of the following BEST - describes the role of the IT risk profile in strategic IT-related decisions?

   • AIt compares performance levels of IT assets to value delivered.
   • BIt provides input to business managers when preparing a business case for new IT projects.
   • CIt facilitates the alignment of strategic IT objectives to business objectives.
   • DIt helps assess the effects of IT decisions on risk exposure.

   Show answer

   Answer: D

   Next question

3. Question 1163 · 1449 in bank

   Which of the following roles would provide the MOST important input when identifying IT risk scenarios?

   • AOperational risk managers
   • BInternal auditors
   • CInformation security managers
   • DBusiness process owners

   Show answer

   Answer: D

   Next question

4. Question 1164 · 1449 in bank

   Accountability for a particular risk is BEST represented in a:

   • Arisk register.
   • BRACI matrix.
   • Crisk catalog.
   • Drisk scenario.

   Show answer

   Answer: B

   Next question

5. Question 1165 · 1449 in bank

   Which of the following should be the PRIMARY consideration when implementing controls for monitoring user activity logs?

   • ABuilding correlations between logs collected from different sources
   • BEnsuring the control is proportional to the risk
   • CImplementing log analysis tools to automate controls
   • DEnsuring availability of resources for log analysis

   Show answer

   Answer: B

   Next question

6. Question 1166 · 1449 in bank

   In addition to the risk register, what should a risk practitioner review to develop an understanding of the organization's risk profile?

   • AThe asset profile
   • BBusiness objectives
   • CThe control catalog
   • DKey risk indicators (KRIs)

   Show answer

   Answer: B

   Next question

7. Question 1167 · 1449 in bank

   Which of the following should be included in a risk scenario to be used for risk analysis?

   • AResidual risk
   • BRisk tolerance
   • CRisk appetite
   • DThreat type

   Show answer

   Answer: D

   Next question

8. Question 1168 · 1449 in bank

   The PRIMARY objective for selecting risk response options is to:

   • Aminimize residual risk.
   • Breduce risk factors.
   • Creduce risk to an acceptable level.
   • Didentify compensating controls.

   Show answer

   Answer: C

   Next question

9. Question 1169 · 1449 in bank

   A PRIMARY function of the risk register is to provide supporting information for the development of an organization's risk:

   • Amap.
   • Bprocess.
   • Cprofile.
   • Dstrategy.

   Show answer

   Answer: C

   Explanation

   A primary function of the risk register is to provide supporting information for the development of an organization's risk profile.

   Source: Adapted from community discussion — john_boogieman

   Next question

10. Question 1170 · 1449 in bank

    A data processing center operates in a jurisdiction where new regulations have significantly increased penalties for data breaches. Which of the following elements of the risk register is MOST important to update to reflect this change?

    • ARisk impact
    • BRisk trend
    • CRisk appetite
    • DRisk likelihood

    Show answer

    Answer: A

    Explanation

    I don't think that the appetite should vary because of a change in regulation. If anything, higher penalties represent a higher impact if the risk is materialized.

    Source: Adapted from community discussion — CL888

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CRISC practice, question 1161. 1449 questions available.