Question 1351 · 1449 in bank
Which of the following is MOST important when considering risk in an enterprise risk management (ERM) process?
Show answer
Answer: C
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following is MOST important when considering risk in an enterprise risk management (ERM) process?
Answer: C
Which of the following is MOST important when developing risk scenarios?
Answer: D
Which of the following BEST protects an organization against breaches when using a software as a service (SaaS) application?
Answer: D
Horrible question. Just horrible. I would have to go with the logic that DLP is protecting. You aren't going to be collecting a lot of logs from a SaaS solution. The other two assessments might help you understand the situation with the SaaS provider better, but are not protecting you.
Source: Adapted from community discussion — CbtL
Which of the following is the GREATEST risk associated with the misclassification of data?
Answer: C
Which of the following would BEST mitigate the risk associated with reputational damage from inappropriate use of social media sites by employees?
Answer: C
Which of the following should be the FIRST step when a company is made aware of new regulatory requirements impacting IT?
Answer: C
The first thing the organization has to do is analyze its current situation to identify the existence of a risk gap and the scope of the actions it needs to close that gap. (7th CRISC manual, section 'Gap Analysis'.
Source: Adapted from community discussion — john_boogieman
The design of procedures to prevent fraudulent transactions within an enterprise resource planning (ERP) system should be based on:
Answer: C
C: correct answer unless you pick the garbage mentioned by the site. Fraud Detection in ERP Systems Using Scenario Matching: ERP systems generally implement controls to prevent certain common kinds of fraud. In addition however, there is an imperative need for detection of more sophisticated patterns of fraudulent activity as evidenced by the legal requirement for company audits and the common incidence of fraud.
Source: Adapted from community discussion — Ceecil1959
Which of the following is described by the definition given below? "It is the expected guaranteed value of taking a risk."
Answer: A
The Certainty equivalent value is the expected guaranteed value of taking a risk. It is derived by the uncertainty of the situation and the potential value of the situation's outcome. Incorrect Answers: B: The risk premium is the difference between the larger expected value of the risk and the smaller certainty equivalent value. C, D: These are not valid answers.
A vulnerability assessment of a vendor-supplied solution has revealed that the software is susceptible to cross-site scripting and SQL injection attacks. Which of the following will BEST mitigate this issue?
Answer: A
Which of the following represents a vulnerability?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1351. 1449 questions available.
Version 1.0.0. How we source questions