Question 1391 · 1449 in bank
A maturity model is MOST useful to an organization when it:
Show answer
Answer: B
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
A maturity model is MOST useful to an organization when it:
Answer: B
It was determined that replication of a critical database used by two business units failed. Which of the following should be of GREATEST concern?
Answer: B
Which of the following is the BEST control to mitigate the risk when a critical customer-facing application has been susceptible to recent credential stuffing attacks?
Answer: C
Which of the following is MOST important to the effective monitoring of key risk indicators (KRIs)?
Answer: D
A multinational organization is considering implementing standard background checks for all new employees. A KEY concern regarding this approach is that it may:
Answer: C
A core data center went offline abruptly for several hours, affecting many transactions across multiple locations. Which of the following would provide the MOST useful information to determine mitigating controls?
Answer: A
You have no idea what you are talking about, you should read the manual and study more to speak with knowledge. For this case, a root cause analysis is a proven technique and the only way to detect the cause and prevent it from recurring.
Source: Adapted from community discussion — john_boogieman
A recent internal risk review reveals the majority of core IT application recovery time objectives (RTOs) have exceeded the maximum time defined by the business application owners. Which of the following is MOST likely to change as a result?
Answer: B
Honestly a bit astonished here.. If apps remains unavailable post RTO then there is an increased likelihood that business will lose money. Tolerance and appetite is set by business leaders and do not change based on operational parameters. I would argue that RTO is based upon Tolerance set by higher management.
Source: Adapted from community discussion — mynk29
A project team recommends accepting the residual risk associated with known regulatory control deficiencies. Which of the following is the risk practitioner's MOST important recommendation to the project manager?
Answer: B
The BEST key performance indicator (KPI) to measure the effectiveness of the security patching process is the percentage of patches installed:
Answer: A
The BEST key performance indicator (KPI) to measure the effectiveness of the security patching process is the percentage of patches installed successfully within the expected time frame (Option A). The percentage of patches installed successfully within the expected time frame is a useful KPI for measuring the effectiveness of the security patching process. This KPI measures how well the security patching process is performing in terms of timely deployment of patches, which is critical for reducing the risk of security vulnerabilities.
Source: Adapted from community discussion — Koulyo
Which of the following is the BEST recommendation of a risk practitioner for an organization that recently changed its organizational structure?
Answer: A
Answer should be A: Re-validate the corporate risk appetite. As mentioned in the book, "Risk appetite and tolerances change over time, and a variety of factors such as new technology, organizational restructuring, or changes in business strategy may require the enterprise to reassess its risk portfolio and reconfirm its risk appetite.
Source: Adapted from community discussion — Jco
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1391. 1449 questions available.
Version 1.0.0. How we source questions