Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following conditions presents the GREATEST risk to an application?
Answer: B
How would having manual app controls is a bigger risk? Would giving developers admin rights to the app poised more risk, thus u need role based access controls? Thus i'm picking B. Happy to discuss
Source: Adapted from community discussion — travdaman
To reduce costs, an organization is combining the second and third lines of defense in a new department that reports to a recently appointed C-level executive. Which of the following is the GREATEST concern with this situation?
Answer: B
Which of the following is the BEST way for a risk practitioner to verify that management has addressed control issues identified during a previous external audit?
Answer: C
Which of the following is MOST important to have in place to ensure the effectiveness of risk and security metrics reporting?
Answer: C
You work as a project manager for BlueWell Inc. Management has asked you to work with the key project stakeholder to analyze the risk events you have identified in the project. They would like you to analyze the project risks with a goal of improving the project's performance as a whole. What approach can you use to achieve this goal of improving the project's performance through risk analysis with your project stakeholders?
Answer: D
By focusing on the high-priority of risk events through qualitative risk analysis you can improve the project's performance. Qualitative analysis is the definition of risk factors in terms of high/medium/low or a numeric scale (1 to 10). Hence it determines the nature of risk on a relative scale. Some of the qualitative methods of risk analysis are: ✑ Scenario analysis- This is a forward-looking process that can reflect risk for a given point in time. ✑ Risk Control Self -assessment (RCSA) - RCSA is used by enterprises (like banks) for the identification and evaluation of operational risk exposure. It is a logical first step and assumes that business owners and managers are closest to the issues and have the most expertise as to the source of the risk. RCSA is a constructive process in compelling business owners to contemplate, and then explain, the issues at hand with the added benefit of increasing their accountability. Incorrect Answers: A: Subject matter experts can help the qualitative risk assessment, but by focusing on high-priority risks the project's performance can improve by addressing these risk events. B: Stakeholders should be involved throughout the project as situations within the project demand their input to risk identification and analysis. C: Qualitative analysis does use a fast approach of analyzing project risks, but it's not the best answer for this
Source: Adapted from community discussion — Joloms
Which of the following is the MOST appropriate key risk indicator (KRI) for backup media that is recycled monthly?
Answer: D
By tracking the percentage of failed restore tests, organizations can identify potential issues with their backup media and take corrective actions to ensure that their backup and restore processes are effective and reliable.
Source: Adapted from community discussion — john_boogieman
Which of the following BEST indicates the efficiency of a process for granting access privileges?
Answer: A
Which of the following BEST indicates the effectiveness of anti-malware software?
Answer: C
When establishing an enterprise IT risk management program, it is MOST important to:
Answer: A
Which of the following is the BEST way to determine software license compliance?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1251. 1449 questions available.
Version 1.0.0. How we source questions