Isaca IT-Risk-Fundamentals Quiz 1 Topic 6 Questions 1-5

Question: 1

Which of the following is the PRIMARY outcome of a risk scoping activity?

AIdentification of major risk factors to be benchmarked against industry competitors

BIdentification of potential high-impact risk areas throughout the enterprise

CIdentification of risk scenarios related to emerging technologies

Show Answer

Question: 2

When selecting a key risk indicator (KRI), it is MOST important that the KRI:

Asupports established KPIs.

Bproduces multiple and varied results.

Cis a reliable predictor of the risk event.

Show Answer

Question: 3

An enterprise recently implemented multi-factor authentication. During the most recent risk assessment, it was determined that cybersecurity risk is within the organization's risk appetite threshold. What is the MOST appropriate action for the organization to take regarding the remaining cybersecurity residual risk?

AAccept

BMitigate

CTransfer

Show Answer

Question: 4

The PRIMARY reason for the implementation of additional security controls is to:

Aavoid the risk of regulatory noncompliance.

Badhere to local data protection laws.

Cmanage risk to acceptable tolerance levels.

Show Answer

Question: 5

To address concerns of increased online skimming attacks, an enterprise is training the software development team on secure software development practices. This is an example of which of the following risk response strategies?

ARisk acceptance

BRisk avoidance

CRisk mitigation

Show Answer

Isaca IT-Risk-Fundamentals Quiz:1 Topic:6 Questions:1-5