Confidently Practice Online with Free CRISC Exam Cram

Practice your Certified in Risk and Information Systems Control certification test with free CRISC exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real CRISC exam dumps, verified questions, and expert-designed free online practice tests. Moreover our Isaca CRISC exam cram backed by our confidence-boosting refund guarantee.

Question 1

Which of the following are sub-categories of threat?Each correct answer represents a complete solution. (Choose three.)

Options :

A : Natural and supernatural

B : Computer and user

C : Natural and man-made

D : Intentional and accidental

E : External and internal

Answer: A,C,D

Question 2

Your project change control board has approved several scope changes that will drastically alter your project plan. You and the project team set about updating the project scope, the WBS, the WBS dictionary, the activity list, and the project network diagram. There are also some changes caused to the project risks, communication, and vendors. What also should the project manager update based on these scope changes?

Options :

A : Stakeholder identification

B : Vendor selection process

C : Quality baseline

D : Process improvement plan

Answer: C

Question 3

During testing, a risk practitioner finds the IT department's recovery time objective (RTO) for a key system does not align with the enterprise's business continuity plan (BCP). Which of the following should be done NEXT?

Options :

A : Complete a risk exception form

B : Report the gap to senior management

C : Consult with the business owner to update the BCP

D : Consult with the IT department to update the RTO

Answer: B

Question 4

Which of the following MUST be assessed before considering risk treatment options for a scenario with significant impact?

Options :

A : Cost-benefit analysis.

B : Incident probability.

C : Risk magnitude.

D : Risk appetite.

Answer: C

Question 5

Which of the following is a responsibility of the second line of defense in the three lines of defense model?

Options :

A : Owning risk scenarios and bearing the consequences of loss

B : Alerting operational management to emerging issues

C : Implementing corrective actions to address deficiencies

D : Performing duties independently to provide assurance

Answer: A