Question 141 · 1449 in bank
Of the following, whose input is ESSENTIAL when developing risk scenarios for the implementation of a third-party mobile application that stores customer data?
Show answer
Answer: A
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Of the following, whose input is ESSENTIAL when developing risk scenarios for the implementation of a third-party mobile application that stores customer data?
Answer: A
An organization's senior management is considering whether to acquire cyber insurance. Which of the following is the BEST way for the risk practitioner to enable management's decision?
Answer: D
Which of the following would BEST mitigate the ongoing risk associated with operating system (OS) vulnerabilities?
Answer: A
Which of the following should be the PRIMARY basis for prioritizing two risk scenarios related to network service disruption that have the same impact?
Answer: A
RTO is the objective recovery time before you lose money. The lower the RTO, the higher its prioritized. MTTR just needs to be below RTO
Source: Adapted from community discussion — blokey
In order to efficiently execute a risk response action plan, it is MOST important for the emergency response team members to understand:
Answer: C
Which of the following is the MOST important consideration when communicating the risk associated with technology end-of-life to business owners?
Answer: D
While maintainability and reliability (option C) are important considerations when communicating the risk associated with technology end-of-life, security and availability (option D) are considered the MOST important factors. This is because, as technology reaches its end-of-life, it may no longer receive updates or patches, which can lead to increased security vulnerabilities and potential data breaches.
Source: Adapted from community discussion — Broesweelies
Which of the following should be the PRIMARY basis for the development of an IT risk scenario?
Answer: D
The PRIMARY basis for the development of an IT risk scenario should be the identification of IT threats and vulnerabilities. IT threats are events or circumstances that have the potential to cause harm to an organization's IT systems and data. These can include external threats, such as cyber attacks and hacking attempts, as well as internal threats, such as employee errors or malicious actions.
Source: Adapted from community discussion — john_boogieman
An organization has just implemented changes to close an identified vulnerability that impacted a critical business process. What should be the NEXT course of action?
Answer: A
Which of the following is the MOST critical factor to consider when determining an organization's risk appetite?
Answer: D
Senior management wants to increase investment in the organization's cybersecurity program in response to changes in the external threat landscape. Which of the following would BEST help to prioritize investment efforts?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 141. 1449 questions available.
Version 1.0.0. How we source questions