CRISC practice questions 461–470

1. Question 461 · 1449 in bank

   Which of the following is the MOST effective way to identify changes in the performance of the control environment?

   • AEvaluate key performance indicators (KPIs).
   • BPerform a control self-assessment (CSA).
   • CImplement continuous monitoring.
   • DAdjust key risk indicators (KRIs).

   Show answer

   Answer: C

   Next question

2. Question 462 · 1449 in bank

   An organization is planning a project to replace several complex manual controls with automated processes. Which of the following is the risk practitioner's MOST important course of action?

   • ATest the automated processes to ensure results are accurate.
   • BDetermine whether the automated processes adequately address the risk.
   • CEstablish the degree of control efficiency improvement.
   • DUpdate the associated control assessments for the automated processes.

   Show answer

   Answer: B

   Next question

3. Question 463 · 1449 in bank

   A risk assessment of an organization’s architecture reveals that the middleware systems have a severe vulnerability that could compromise the confidentiality of record processing. Which of the following is the risk practitioner's BEST course of action?

   • ARecommend additional budget to cover the cost of an upgrade.
   • BDevelop a remediation plan with the business process owner.
   • CEscalate the issue to senior management.
   • DDocument the issue in the business impact analysis (BIA).

   Show answer

   Answer: B

   Next question

4. Question 464 · 1449 in bank

   Which of the following is MOST important when planning to implement a Software as a Service (SaaS) application to manage information?

   • ADetermining if sensitive data will be included
   • BAssessing if adequate deconversion services are available
   • CReviewing service level agreements (SLAs)
   • DObtaining the service provider’s controls attestation

   Show answer

   Answer: A

   Next question

5. Question 465 · 1449 in bank

   Which of the following is MOST important for the organization to consider before implementing a new in-house developed artificial intelligence (AI) solution?

   • AData feeds
   • BExpected algorithm outputs
   • CIndustry trends in AI
   • DAlert functionality

   Show answer

   Answer: A

   Next question

6. Question 466 · 1449 in bank

   An organization is considering the adoption of an aggressive business strategy to achieve desired growth. From a risk management perspective, what should the risk practitioner do NEXT?

   • AUpdate risk awareness training to reflect current levels of risk appetite and tolerance.
   • BIdentify new threats resulting from the new business strategy.
   • CIncrease the scale for measuring impact due to threat materialization.
   • DInform the board of potential risk scenarios associated with aggressive business strategies.

   Show answer

   Answer: B

   Explanation

   B. Identify new threats resulting from the new business strategy. The introduction of a new strategy can bring about new risks and uncertainties that need to be identified and assessed. By understanding the potential threats, the organization can develop effective risk mitigation and management strategies to support the successful implementation of the aggressive business strategy.

   Source: Adapted from community discussion — K5000ism

   Next question

7. Question 467 · 1449 in bank

   Which of the following provides the BEST indication of risk management maturity?

   • AComprehensive risk and control assessment methodology
   • BRisk management policy alignment with corporate culture
   • CBusiness continuity insurance coverage
   • DPresence of a risk management framework

   Show answer

   Answer: B

   Next question

8. Question 468 · 1449 in bank

   Which of the following is the MOST important document regarding the treatment of sensitive data?

   • AOrganization risk profile
   • BDigital rights management policy
   • CInformation classification policy
   • DEncryption policy

   Show answer

   Answer: C

   Next question

9. Question 469 · 1449 in bank

   In an organization that allows employee use of social media accounts for work purposes, which of the following is the BEST way to protect company sensitive information from being exposed?

   • ATaking punitive action against employees who expose confidential data
   • BRequiring employees to sign nondisclosure agreements (NDAs)
   • CImplementing a data loss prevention (DLP) solution
   • DEducating employees on what needs to be kept confidential

   Show answer

   Answer: D

   Next question

10. Question 470 · 1449 in bank

    In response to recent security incidents, the IT risk management team is promoting a global security plan that defines controls to be implemented in multiple regions. Which of the following BEST enables the successful deployment of this plan?

    • AObtain the approval of each regional head.
    • BEngage an external auditor in each region before deployment.
    • CProvide each region with adequate funding.
    • DAllow each region to adapt the plan to its local requirements

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CRISC practice, question 461. 1449 questions available.