CRISC Practice Online

Question 1

Which of the following should be the PRIMARY role of the data owner in a risk management program?

A : Maintaining data syntax rules

B : Establishing enterprise system security levels

C : Applying data classification policy

D : Specifying retention requirements

Answer: C

Question 2

Who is ULTIMATELY accountable for the confidentiality of data in the event of a data breach within a Software as a Service (SaaS) environment?

A : Vendor’s application owner

B : Vendor’s information security officer

C : Customer’s data owner

D : Customer’s data privacy officer

Answer: C

Question 3

Which of the following would BEST help to address the risk associated with malicious outsiders modifying application data?

A : Role-based access controls

B : Multi-factor authentication

C : Activation of control audits

D : Acceptable use policies

Answer: B

Question 4

You are the project manager for your organization. You are preparing for the quantitative risk analysis. Mark, a project team member, wants to know why you need to do quantitative risk analysis when you just completed qualitative risk analysis. Which one of the following statements best defines what quantitative risk analysis is?

A : Quantitative risk analysis is the review of the risk events with the high probability and the highest impact on the project objectives.

B : Quantitative risk analysis is the process of prioritizing risks for further analysis or action by assessing and combining their probability of occurrence and impact.

C : Quantitative risk analysis is the process of numerically analyzing the effect of identified risks on overall project objectives.

D : Quantitative risk analysis is the planning and quantification of risk responses based on probability and impact of each risk event.

Answer: C

Question 5

Which of the following will BEST help to ensure key risk indicators (KRIs) provide value to risk owners?

A : Ongoing training

B : Timely notification

C : Cost minimization

D : Return on investment (ROI)

Answer: B

Name:	Certified in Risk and Information Systems Control
Exam Code:	CRISC
Certification:	CRISC
Vendor:	Isaca
Total Questions:	1818
Last Updated:	Apr 23, 2024

Download Demo CRISC Dumps

Create Account

Password Recovery

Download Demo CRISC Dumps

Member Login

Create Account

Password Recovery

CRISC Practice Online