Question 1

Which of the following is performed after a risk assessment is completed?

Options :

A : Identifying vulnerabilities

B : Conducting an impact analysis

C : Defining risk response options

D : Defining risk taxonomy

Answer: C

Question 2

To help ensure the success of a major IT project, it is MOST important to:

Options :

A : obtain approval from business process owners

B : obtain the appropriate stakeholders' commitment

C : update the risk register on a regular basis

D : align the project with the IT risk framework

Answer: B

Question 3

You are the project manager of your enterprise. You have identified new threats, and then evaluated the ability of existing controls to mitigate risk associated with new threats. You noticed that the existing control is not efficient in mitigating these new risks. What are the various steps you could take in this case?Each correct answer represents a complete solution. (Choose three.)

Options :

A : Education of staff or business partners

B : Deployment of a threat-specific countermeasure

C : Modify of the technical architecture

D : Apply more controls

Answer: A,B,C

Question 4

While reviewing the risk register, a risk practitioner notices that different business units have significant variances in inherent risk for the same risk scenario. Which of the following is the BEST course of action?

Options :

A : Request that both business units conduct another review of the risk.

B : Review the assumptions of both risk scenarios to determine whether the variance is reasonable.

C : Update the risk register with the average of residual risk for both business units.

D : Update the risk register to ensure both risk scenarios have the highest residual risk.

Answer: B

Question 5

An organization is outsourcing data processing to a third-party data center facility to reduce costs. Who is responsible for the performance of data retention controls?

Options :

A : The organization’s control owner

B : The third-party senior management

C : The third-party control owner

D : The organization’s internal audit team

Answer: C

Confidently Practice Online with Free CRISC Exam Cram

Buying Options: