Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Print jobs containing confidential information are sent to a shared network printer located in a secure room. Which of the following is the BEST control to prevent the inappropriate disclosure of confidential information?
Answer: D
A physical access control wouldn’t stop you reading someone else’s print job. A personal code would release the job on input
Source: Adapted from community discussion — [Removed]
Which of the following would be MOST helpful when communicating roles associated with the IT risk management process?
Answer: B
Fred is the project manager of a large project in his organization. Fred needs to begin planning the risk management plan with the project team and key stakeholders. Which plan risk management process tool and technique should Fred use to plan risk management?
Answer: C
There is only one tool and technique available for Fred to plan risk management: planning meetings and analysis. Planning Meeting and Analysis is a tool and technique in the Plan Risk Management process. Planning meetings are organized by the project teams to develop the risk management plan. Attendees at these meetings include the following: ✑ Project manager ✑ Selected project team members ✑ Stakeholders ✑ Anybody in the organization with the task to manage risk planning Sophisticated plans for conducting the risk management activities are defined in these meetings, responsibilities related to risk management are assigned, and risk contingency reserve application approaches are established and reviewed. Incorrect Answers: A, B, D: These are not plan risk management tools and techniques.
Source: Adapted from community discussion — Josh93
The PRIMARY benefit of conducting a risk workshop using a top-down approach instead of a bottom-up approach is the ability to:
Answer: D
A bank recently incorporated blockchain technology with the potential to impact known risk within the organization. Which of the following is the risk practitioner's BEST course of action?
Answer: D
Of the following, who is BEST suited to assist a risk practitioner in developing a relevant set of risk scenarios?
Answer: C
The risk associated with an asset after controls are applied can be expressed as:
Answer: C
A risk practitioner notices a trend of noncompliance with an IT-related control. Which of the following would BEST assist in making a recommendation to management?
Answer: D
Which key performance indicator (KPI) BEST measures the effectiveness of an organization's disaster recovery program?
Answer: B
The PRIMARY advantage of involving end users in continuity planning is that they:
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 11. 1449 questions available.
Version 1.0.0. How we source questions