Question 561 · 1449 in bank
Which of the following aspects of risk can be transferred to a third party?
Show answer
Answer: D
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following aspects of risk can be transferred to a third party?
Answer: D
Which of the following has the GREATEST impact on backup policies for a system supporting a critical process?
Answer: B
Which of the following provides the BEST indication that existing controls are effective?
Answer: C
An organization has engaged an external consultant to assess its cybersecurity program. Which of the following findings would be MOST important to address?
Answer: D
You are completing the qualitative risk analysis process with your project team and are relying on the risk management plan to help you determine the budget, schedule for risk management, and risk categories. You discover that the risk categories have not been created. When the risk categories should have been created?
Answer: C
The plan risk management process is when risk categories were to be defined. If they were not defined, as in this scenario, it is acceptable to define the categories as part of the qualitative risk analysis process. Plan risk management is the process of defining the way to conduct the risk management activities. Planning is essential for providing sufficient resources and time for risk management activities, and to establish an agreed-upon basis of evaluating risks. This process should start as soon as project is conceived and should be completed early during project planning. Incorrect Answers: A: Risk categories are not defined through the define scope process. B: Risk categories are not defined through the risk identification process. D: Risk categories are not defined through the create work breakdown structure process.
To enable effective integration of IT risk scenarios and enterprise risk management (ERM), it is MOST important to have a consistent approach to reporting:
Answer: C
The results of a risk assessment reveal risk scenarios with high impact and low likelihood of occurrence. Which of the following would be the BEST action to address these scenarios?
Answer: C
Which of the following is MOST helpful in identifying appropriate business stakeholders to construct and assess IT risk scenarios?
Answer: B
Which of the following scenarios is MOST important to communicate to senior management?
Answer: D
A risk practitioner has observed an increasing trend of phishing attempts directed at employees. Which of the following is the MOST important action to help mitigate the situation?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 561. 1449 questions available.
Version 1.0.0. How we source questions