Isaca CRISC Quiz 3 Topic 8 Questions 11-15

Question: 1

Which of the following is the MOST important input when developing risk scenarios?

AKey performance indicators

BBusiness objectives

CThe organization's risk framework

DRisk appetite

Show Answer

Question: 2

Which of the following BEST enables an organization to determine whether external emerging risk factors will impact the organization's risk profile?

AControl identification and mitigation

BAdoption of a compliance-based approach

CPrevention and detection techniques

DScenario analysis and stress testing

Show Answer

Question: 3

After undertaking a risk assessment of a production system, the MOST appropriate action is for the risk manager to:

Arecommend a program that minimizes the concerns of that production system.

Binform the development team of the concerns, and together formulate risk reduction measures.

Cinform the process owner of the concerns and propose measures to reduce them

Dinform the IT manager of the concerns and propose measures to reduce them.

Show Answer

Question: 4

When an organization's disaster recovery plan has a reciprocal agreement, which of the following risk treatment options is being applied?

AAcceptance

BMitigation

CTransfer

DAvoidance

Show Answer

Question: 5

Which of the following should be a risk practitioner s MOST important consideration when developing IT risk scenarios?

AThe impact of controls on the efficiency of the business in delivering services

BLinkage of identified risk scenarios with enterprise risk management

CPotential threats and vulnerabilities that may have an impact on the business

DResults of network vulnerability scanning and penetration testing

Show Answer

Isaca CRISC Quiz:3 Topic:8 Questions:11-15