Question 161 · 1449 in bank
Which of the following provides the MOST useful input when developing IT risk scenarios?
Show answer
Answer: D
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following provides the MOST useful input when developing IT risk scenarios?
Answer: D
What is the PRIMARY purpose of reporting residual risk from two consecutive IT risk assessments to management?
Answer: D
Which of the following should be of MOST concern to a risk practitioner reviewing a recent audit report of an organization's data center?
Answer: A
Which of the following is the BEST way to mitigate the risk of inappropriate access to personally identifiable information (PII) by third-party cloud service personnel?
Answer: A
An organization is participating in an industry benchmarking study that involves providing customer transaction records for analysis. Which of the following is the MOST important control to ensure the privacy of customer information?
Answer: A
Which of the following is the BEST way to ensure adequate resources will be allocated to manage identified risk?
Answer: A
Correction to 'A', reason: because when specific individuals or teams are responsible and accountable for managing identified risks, they are more likely to prioritize and allocate the necessary resources to address the risks effectively. Promoting an organizational culture of risk awareness is also important, but it may not necessarily ensure that adequate resources are allocated to manage identified risks.
Source: Adapted from community discussion — john_boogieman
An information security manager has advocated for the purchase of a data loss prevention (DLP) system to reduce the impact of a potential data breach. Which of the following is the BEST way for the risk practitioner to support this recommendation?
Answer: A
As part of its vendor management program, an organization has commissioned an audit of a vendor's control framework for the purpose of implementing compensating controls into its environment. Which risk response option has been decided?
Answer: D
Which of the following would be MOST helpful to management when reviewing enterprise risk appetite and tolerance?
Answer: D
Which of the following are the MOST important inputs when determining the desired state of IT risk during gap analysis?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 161. 1449 questions available.
Version 1.0.0. How we source questions