Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
An organization has allowed several employees to retire early in order to avoid layoffs. Many of these employees have been subject matter experts for critical assets. Which type of risk is MOST likely to materialize?
Answer: D
Which of the following is the result of a realized risk scenario?
Answer: C
The result of a realized risk scenario is a Loss event. A risk scenario is a description of a potential event or situation that could result in a loss or negative impact for the organization. When a risk scenario is realized, it means that the event or situation has occurred, and the resulting impact is a loss event.
Source: Adapted from community discussion — john_boogieman
Which of the following is the GREATEST concern when establishing key risk indicators (KRIs)?
Answer: B
Agree with B. If you do not know what the risk really is (you're ineffective at assessing it) how can your KRIs have any merit?
Source: Adapted from community discussion — CbtL
A penetration test reveals several vulnerabilities in a web-facing application. Which of the following should be the FIRST step in selecting a risk response?
Answer: B
Which of the following is the MOST important consideration for effectively maintaining a risk register?
Answer: A
The MOST important consideration for effectively maintaining a risk register is that the register is updated frequently. A risk register is a critical tool for managing risks within an organization. It contains information on identified risks, their likelihood and potential impact, and the organization's response to them. To be effective, a risk register must be accurate and up-to-date.
Source: Adapted from community discussion — john_boogieman
Which risk response strategy could management apply to both positive and negative risk that has been identified?
Answer: A
Which of the following is MOST important to determine as a result of a risk assessment?
Answer: C
Which of the following is the BEST recommendation to address recent IT risk trends that indicate social engineering attempts are increasing in the organization?
Answer: B
Which of the following is MOST important for an organization to consider when developing its IT strategy?
Answer: D
Which of the following is the MOST important course of action for a risk practitioner when reviewing the results of control performance monitoring?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 381. 1449 questions available.
Version 1.0.0. How we source questions