Question 521 · 1449 in bank
Which of the following should be given the HIGHEST priority when developing a response plan for risk assessment results?
Show answer
Answer: D
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following should be given the HIGHEST priority when developing a response plan for risk assessment results?
Answer: D
Which of the following is the MOST important consideration for a risk owner when deciding whether to accept IT-related risk?
Answer: D
Which of the following is the GREATEST concern if the recovery time objective (RTO) is not achieved during a disaster recovery test?
Answer: C
Correction C. Inadequate system availability If the organization is military or non-profit or specific government organization where availability is paramount then A is not the best option The primary purpose of conducting a disaster recovery test is to ensure that critical systems and services can be restored within the defined recovery time objective (RTO). If the RTO is not achieved, it implies that the systems are not restored within the expected timeframe, leading to inadequate system availability. Inadequate system availability can have severe consequences, affecting business operations, customer satisfaction, and potentially causing disruptions that impact revenue (Option A) and overall organizational performance. While other concerns such as lack of network redundancy (Option B) and lack of clear roles and responsibilities (Option D) are important, the failure to achieve the RTO directly speaks to the effectiveness of the disaster recovery process in ensuring timely system availability.
Source: Adapted from community discussion — K5000ism
Which of the following is the MOST important action for a risk practitioner when a recovery test indicates control gaps?
Answer: D
Which of the following would be the GREATEST risk associated with conducting a parallel run during the replacement of a legacy system?
Answer: B
Which of the following should be a risk practitioner’s GREATEST concern upon learning of failures in a data migration activity?
Answer: A
Which of the following would be MOST helpful when determining the resources needed to mitigate risk identified as a result of a risk assessment?
Answer: A
A risk practitioner notes that the number of unauthorized disclosures of confidential data has been increasing. Which of the following is MOST important to examine for determining the root cause?
Answer: B
B. Completeness of data classification schema A data classification schema defines how different types of data are categorized based on their sensitivity and confidentiality. If there is an increase in unauthorized disclosures, it may indicate weaknesses in how data is classified and handled. Examining the completeness of the data classification schema involves assessing whether all types of sensitive data are properly identified, labeled, and protected according to their level of confidentiality.
Source: Adapted from community discussion — K5000ism
An organization has established workflows in its service desk to support employee reports of security-related concerns. Which of the following is the MOST efficient approach to analyze these concerns?
Answer: C
Which of the following is MOST important for a risk practitioner to review during an IT risk assessment?
Answer: B
B. Information system assets and associated threats Information system assets include hardware, software, data, personnel, and other elements critical to the organization's operations. Identifying and assessing associated threats helps in determining the potential risks that these assets face, allowing the risk practitioner to prioritize and address the most significant risks.
Source: Adapted from community discussion — K5000ism
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 521. 1449 questions available.
Version 1.0.0. How we source questions