Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
A large organization needs to report risk at all levels for a new centralized virtualization project to reduce cost and improve performance. Which of the following would MOST effectively represent the overall risk of the project to senior management?
Answer: A
Which of the following would be the GREATEST challenge when implementing a corporate risk framework for a global organization?
Answer: D
Which of the following is the PRIMARY reason to adopt key control indicators (KCIs) in the risk monitoring and reporting process?
Answer: D
Which of the following management actions will MOST likely change the likelihood rating of a risk scenario related to remote network access?
Answer: A
A. Implementing multi-factor authentication. Implementing multi-factor authentication (MFA) is a security measure that can significantly reduce the likelihood of unauthorized access to a network, especially for remote network access scenarios. MFA requires users to provide two or more forms of authentication before granting access, adding an extra layer of security beyond a simple username and password. This increased security reduces the likelihood of successful remote network access by unauthorized individuals and, as a result, is likely to lead to a lower likelihood rating for associated risk scenarios.
Source: Adapted from community discussion — Staanlee
An organization has completed a risk assessment of one of its service providers. Who should be accountable for ensuring that risk responses are implemented?
Answer: B
A risk practitioner identifies a database application that has been developed and implemented by the business independently of IT. Which of the following is the BEST course of action?
Answer: C
Which of the following would be a risk practitioner's BEST course of action when a project team has accepted a risk outside the established risk appetite?
Answer: B
When a project team has accepted a risk outside the established risk appetite, a risk practitioner's best course of action would be to engage in a risk review with the project team (sponsor) to understand the reasons behind the decision to accept the risk and to assess the risk's potential impact on the project.
Source: Adapted from community discussion — john_boogieman
Who should be responsible for evaluating the residual risk after a compensating control has been applied?
Answer: C
Which of the following should a risk practitioner validate FIRST when a mitigating control cannot be implemented fully to support business objectives?
Answer: B
Which of the following is the BEST way to determine whether system settings are in alignment with control baselines?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1381. 1449 questions available.
Version 1.0.0. How we source questions