Question 351 · 1449 in bank
Which of the following should be used as the PRIMARY basis for evaluating the state of an organization’s cloud computing environment against leading practices?
Show answer
Answer: B
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following should be used as the PRIMARY basis for evaluating the state of an organization’s cloud computing environment against leading practices?
Answer: B
Which of the following should be the PRIMARY basis for prioritizing risk responses?
Answer: B
Of the following, who is responsible for approval when a change in an application system is ready for release to production?
Answer: A
An organization’ s recovery team is attempting to recover critical data backups following a major flood in its data center. However, key team members do not know exactly what steps should be taken to address this crisis. Which of the following is the MOST likely cause of this situation?
Answer: A
A - A. Failure to test the disaster recovery plan (DRP) is the most likely cause of key team members not knowing exactly what steps should be taken to recover critical data backups following a major flood in the data center. Testing a disaster recovery plan (DRP) helps to ensure that the plan is effective and that all team members are familiar with their roles and responsibilities in the event of a disaster. By failing to test the DRP, an organization may not have a clear understanding of what needs to be done to recover critical data backups, leading to confusion and delays in the recovery process. Other causes, such as a lack of well-documented business impact analysis (BIA) or significant changes in management personnel, may also contribute to the situation, but failure to test the DRP is the most likely cause. Lack of annual updates to the DRP is not directly related to the situation described.
Source: Adapted from community discussion — GRamos
The MAIN reason for prioritizing IT risk responses is to enable an organization to:
Answer: D
You are the project manager of GHT project. A stakeholder of this project requested a change request in this project. What are your responsibilities as the project manager that you should do in order to approve this change request? Each correct answer represents a complete solution. (Choose two.)
Answer: AC
Which of the following presents the GREATEST challenge to managing an organization’s end-user devices?
Answer: C
Pretty sure it is C. No idea why John is believing chatgpt here. D is the least of your problems. It is an Isaca question, so inventorizing is the most important, it all starts there.
Source: Adapted from community discussion — Broesweelies
A risk practitioner has established that a particular control is working as desired, but the annual cost of maintenance has increased and now exceeds the expected annual loss exposure. The result is that the control is:
Answer: A
Which of the following controls focuses on operational efficiency in a functional area sticking to management policies?
Answer: C
Which of the following is MOST important when determining risk appetite?
Answer: D
Risk appetite is the amount and type of risk that an organization is willing to accept in pursuit of its objectives. Establishing an appropriate risk appetite is critical to achieving organizational goals, as it helps guide decision-making and resource allocation.
Source: Adapted from community discussion — john_boogieman
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 351. 1449 questions available.
Version 1.0.0. How we source questions