Question 1371 · 1449 in bank
Which of the following is a risk practitioner's MOST important responsibility in managing risk acceptance that exceeds risk tolerance?
Show answer
Answer: B
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following is a risk practitioner's MOST important responsibility in managing risk acceptance that exceeds risk tolerance?
Answer: B
A risk practitioner has discovered a deficiency in a critical system that cannot be patched. Which of the following should be the risk practitioner's FIRST course of action?
Answer: D
Which of the following will BEST help to ensure implementation of corrective action plans?
Answer: A
What is the PRIMARY reason an organization should include background checks on roles with elevated access to production as part of its hiring process?
Answer: D
An organization has implemented a system capable of comprehensive employee monitoring. Which of the following should direct how the system is used?
Answer: C
Legal and regulatory risk associated with business conducted over the Internet is driven by:
Answer: A
While there are efforts to establish international regulations governing data privacy, cybersecurity, and other aspects of online business, the current legal and regulatory environment is characterized by a patchwork of national and regional regulations.
Source: Adapted from community discussion — john_boogieman
An organization is developing a security risk awareness training program for the IT help desk and has asked the risk practitioner for suggestions. In addition to technical topics, which of the following is MOST important to recommend be included in the training?
Answer: B
Which of the following should be the PRIMARY goal of developing information security metrics?
Answer: C
There are five inputs to the quantitative risk analysis process. Which one of the following is NOT an input to quantitative risk analysis process?
Answer: B
Enterprise environmental factor is not an input to the quantitative risk analysis process. The five inputs to the perform quantitative risk analysis process are: risk register, risk management plan, cost management plan, schedule management plan, and organizational process assets. Incorrect Answers: A, C, D: These are the valid inputs to the perform quantitative risk analysis process.
Which of the following is a drawback in the use of quantitative risk analysis?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1371. 1449 questions available.
Version 1.0.0. How we source questions