CRISC practice questions 971–980

1. Question 971 · 1449 in bank

   Which of the following is the BEST way to identify changes to the risk landscape?

   • AAccess reviews
   • BRoot cause analysis
   • CInternal audit reports
   • DThreat modeling

   Show answer

   Answer: D

   Explanation

   The BEST way to identify changes to the risk landscape would be through threat modeling. Threat modeling is a structured approach to identifying potential threats, vulnerabilities, and countermeasures associated with a system, process, or application. It involves creating models that describe the system, identifying the assets and data involved, and then analyzing potential threats and vulnerabilities to those assets and data. This allows organizations to identify changes to the risk landscape and take appropriate actions to mitigate risks.

   Source: Adapted from community discussion — Koulyo

   Next question

2. Question 972 · 1449 in bank

   Which of the following is the BEST evidence that a user account has been properly authorized?

   • ANotification from human resources that the account is active
   • BFormal approval of the account by the user's manager
   • CUser privileges matching the request form
   • DAn email from the user accepting the account

   Show answer

   Answer: B

   Explanation

   B. Formal approval of the account by the user's manager. The best evidence that a user account has been properly authorized is "B. Formal approval of the account by the user's manager." User account authorization should involve an appropriate level of managerial approval to ensure that the creation or modification of the account aligns with the organization's security and access policies. The manager's approval signifies that the account is needed and authorized for the user. While the other options (notification from human resources, user privileges matching the request form, an email from the user accepting the account) can provide supporting information, formal approval by the user's manager is the most direct and authoritative evidence of proper authorization, as it ensures that the request has been reviewed and approved by an appropriate individual with the necessary authority.

   Source: Adapted from community discussion — Staanlee

   Next question

3. Question 973 · 1449 in bank

   Which of the following elements of a risk register is MOST likely to change as a result of change in management's risk appetite?

   • ARisk likelihood and impact
   • BRisk velocity
   • CInherent risk
   • DKey risk indicator (KRI) thresholds

   Show answer

   Answer: D

   Explanation

   Normally John boogieman is spot on but I have to disagree on this one. Management's risk appetite is the amount and type of risk an organization is willing to take to achieve its objectives. A change in risk appetite can result in changes to the key risk indicator (KRI) thresholds, as these thresholds are typically set based on the organization's tolerance for risk. Adjusting the KRI thresholds allows the organization to reflect the new risk appetite in its monitoring and reporting processes.

   Source: Adapted from community discussion — Broesweelies

   Next question

4. Question 974 · 1449 in bank

   Which of the following is the BEST method to ensure a terminated employee's access to IT systems is revoked upon departure from the organization?

   • ALogin attempts are reconciled to a list of terminated employees
   • BA process to remove employee access during the exit interview is implemented
   • CThe human resources (HR) system automatically revokes system access
   • DA list of terminated employees is generated for reconciliation against current IT access

   Show answer

   Answer: C

   Explanation

   The best method is always an automated process that revokes access when the employee is terminated, the reconciliation process does not itself revoke access.

   Source: Adapted from community discussion — john_boogieman

   Next question

5. Question 975 · 1449 in bank

   Which of the following is the BEST approach to use when creating a comprehensive set of IT risk scenarios?

   • AGather scenarios from senior management
   • BDerive scenarios from IT risk policies and standards
   • CBenchmark scenarios against industry peers
   • DMap scenarios to a recognized risk management framework

   Show answer

   Answer: D

   Next question

6. Question 976 · 1449 in bank

   Which of the following BEST measures the efficiency of an incident response process?

   • ANumber of incidents lacking responses
   • BNumber of incidents escalated to management
   • CAverage time between changes and updating of escalation matrix
   • DAverage gap between actual and agreed response times

   Show answer

   Answer: D

   Next question

7. Question 977 · 1449 in bank

   Which of the following is the MOST common concern associated with outsourcing to a service provider?

   • ACombining incompatible duties
   • BUnauthorized data usage
   • CDenial of service (DoS) attacks
   • DLack of technical expertise

   Show answer

   Answer: B

   Next question

8. Question 978 · 1449 in bank

   An effective control environment is BEST indicated by controls that:

   • Aminimize senior management's risk tolerance
   • Bmanage risk within the organization's risk appetite
   • Care cost-effective to implement
   • Dreduce the thresholds of key risk indicators (KRIs)

   Show answer

   Answer: B

   Next question

9. Question 979 · 1449 in bank

   Which of the following attributes of a key risk indicator (KRI) is MOST important?

   • ARepeatable
   • BQualitative
   • CAutomated
   • DQuantitative

   Show answer

   Answer: A

   Explanation

   Repeatable - A KRI must be repeatable and able to be measured on a regular basis to show trends and patterns in activity and results

   Source: Adapted from community discussion — thedood

   Next question

10. Question 980 · 1449 in bank

    An organization has determined a risk scenario is outside the defined risk tolerance level. What should be the NEXT course of action?

    • ADevelop a compensating control
    • BIdentify risk responses
    • CAllocate remediation resources
    • DPerform a cost-benefit analysis

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CRISC practice, question 971. 1449 questions available.