Question 931 · 1449 in bank
The MOST effective way to increase the likelihood that risk responses will be implemented is to:
Show answer
Answer: D
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
The MOST effective way to increase the likelihood that risk responses will be implemented is to:
Answer: D
The BEST method to align an organization's business continuity plan (BCP) and disaster recovery plan (DRP) with core business needs to:
Answer: D
Option C (executing periodic walk-throughs of the BCP and DRP) is also not the best method since walk-throughs are important for validating and testing the BCP and DRP, but they do not necessarily ensure that they are aligned with the organization's core business needs.
Source: Adapted from community discussion — Koulyo
Which of the following is the BEST method to identify unnecessary controls?
Answer: D
Evaluating the impact of removing existing controls is the BEST method to identify unnecessary controls. By evaluating the impact of removing existing controls, an organization can determine whether a control is actually needed to mitigate a particular risk. This can be done by conducting a risk assessment to identify the risks associated with the process or system, and then evaluating the effectiveness of the existing controls in mitigating those risks.
Source: Adapted from community discussion — john_boogieman
The best way to test the operational effectiveness of a data backup procedure is to:
Answer: C
During a control review, the control owner states that an existing control has deteriorated over time. What is the BEST recommendation to the control owner?
Answer: B
The BEST recommendation is option B, Discuss risk mitigation options with the risk owner. By discussing the issue with the risk owner, the control owner can work collaboratively to identify and assess the risks associated with the deteriorated control, determine the appropriate course of action to mitigate the risks, and implement a plan to address the issue. This recommendation provides the opportunity for the control owner to address the issue in a timely and efficient manner without involving senior management or implementing compensating controls unnecessarily.
Source: Adapted from community discussion — SuperMax
Which of the following approaches to bring your own device (BYOD) service delivery provides the BEST protection from data loss?
Answer: C
Which of the following is the MOST effective way to incorporate stakeholder concerns when developing risk scenarios?
Answer: A
echo A, C, D cannot be answer. btw A and B , B is done after Risk assessment followed by Risk Treatment completed. So A make more sense.
Source: Adapted from community discussion — Raj1510
Which of the following is the GREATEST benefit of incorporating IT risk scenarios into the corporate risk register?
Answer: C
Risk management strategies are PRIMARILY adopted to:
Answer: D
Which of the following is the BEST way to mitigate the risk associated with fraudulent use of an enterprise's brand on Internet sites?
Answer: D
Ok, new approach, fraudulent use in the sense of 'phishing', for example if it would be 'd'. Developing training and awareness campaigns would be the best way to mitigate the risk associated with fraudulent use of an enterprise's brand on internet sites. By training employees and raising awareness among stakeholders, the organization can reduce the likelihood of individuals falling victim to these types of fraudulent sites. Scanning the internet to search for unauthorized usage may help identify instances of fraudulent activity, but it does not address the underlying vulnerability that allows these sites to succeed in the first place. Therefore, the best approach is to proactively educate employees and stakeholders to recognize fraudulent sites and take appropriate action to mitigate the risk.
Source: Adapted from community discussion — john_boogieman
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 931. 1449 questions available.
Version 1.0.0. How we source questions