Question 321 · 1449 in bank
Which of the following is the PRIMARY objective of maintaining an information asset inventory?
Show answer
Answer: B
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following is the PRIMARY objective of maintaining an information asset inventory?
Answer: B
Which of the following would be of MOST concern to a risk practitioner reviewing risk action plans for documented IT risk scenarios?
Answer: C
Which of the following is MOST likely to deter an employee from engaging in inappropriate use of company-owned IT systems?
Answer: B
Which of the following is MOST important to include when reporting the effectiveness of risk management to senior management?
Answer: D
D. Changes in residual risk levels against acceptable levels When reporting the effectiveness of risk management to senior management, it is most important to include changes in residual risk levels against acceptable levels. This information helps senior management understand how well the risk management efforts are performing in terms of keeping risks within the acceptable range, which is crucial for strategic decision-making and resource allocation.
Source: Adapted from community discussion — Broesweelies
The PRIMARY objective of testing the effectiveness of a new control before implementation is to:
Answer: C
The primary objective of testing the effectiveness of a new control before implementation is to evaluate the degree of risk mitigation.
Source: Adapted from community discussion — john_boogieman
Which of the following is the BEST approach for selecting controls to minimize risk?
Answer: D
Which of the following aspect of monitoring tool ensures that the monitoring tool has the ability to keep up with the growth of an enterprise?
Answer: A
Scalability is the ability of a system or tool to grow and adapt to the changing needs of an enterprise. This means that as the enterprise grows, the monitoring tool can also grow and adapt to accommodate the increased data and usage. This allows the organization to continue to use the same monitoring tool without needing to replace it with a new one that can handle the increased data and usage. Customizability refers to the ability of the tool to be customized to the specific needs of the enterprise, sustainability refers to the ability of the tool to be used over an extended period of time, and impact on performance refers to the effect of the tool on the performance of the enterprise. The aspect of scalability is the most important aspect that ensures that the monitoring tool has the ability to keep up with the growth of an enterprise.
Source: Adapted from community discussion — mfourati
Which of the following provides the MOST reliable evidence of a control’s effectiveness?
Answer: D
An incentive program is MOST likely implemented to manage the risk associated with loss of which organizational asset?
Answer: A
An organization has experienced a cyber attack that exposed customer personally identifiable information (PII) and caused extended outages of network services. Which of the following stakeholders are MOST important to include in the cyber response team to determine response actions?
Answer: A
The Cyber risk remediation plan owner is best suited to provide guidance on how to contain the attack, minimize the impact, and prevent future attacks.
Source: Adapted from community discussion — john_boogieman
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 321. 1449 questions available.
Version 1.0.0. How we source questions