Isaca CRISC Quiz 3 Topic 8 Questions 11-15

Question: 1

Which of the following is the MOST important input when developing risk scenarios?

AKey performance indicators

BBusiness objectives

CThe organization's risk framework

DRisk appetite

Show Answer

Question: 2

Which of the following BEST enables an organization to determine whether external emerging risk factors will impact the organization's risk profile?

AControl identification and mitigation

BAdoption of a compliance-based approach

CPrevention and detection techniques

DScenario analysis and stress testing

Show Answer

Question: 3

After undertaking a risk assessment of a production system, the MOST appropriate action is for the risk manager to:

Arecommend a program that minimizes the concerns of that production system.

Binform the development team of the concerns, and together formulate risk reduction measures.

Cinform the process owner of the concerns and propose measures to reduce them

Dinform the IT manager of the concerns and propose measures to reduce them.

Show Answer

Question: 4

Which of the following is MOST important to review when determining whether a potential IT service provider s control environment is effective?

AIndependent audit report

BControl self-assessment

CKey performance indicators (KPIs)

DService level agreements (SLAs)

Show Answer

Question: 5

Which of the following BEST enables an organization to determine whether external emerging risk factors will impact the organization's risk profile?

AControl identification and mitigation

BAdoption of a compliance-based approach

CPrevention and detection techniques

DScenario analysis and stress testing

Show Answer

Isaca CRISC Quiz:3 Topic:8 Questions:11-15