Instant Access ISACA.CRISC.v2022-04-01.q914 Actual Practice Test Engine for Free (Page 78)

Question 381

You work as a project manager for BlueWell Inc. You are about to complete the quantitative risk analysis process for your project. You can use three available tools and techniques to complete this process. Which one of the following is NOT a tool or technique that is appropriate for the quantitative risk analysis process?

A.Data gathering and representation techniques
B.Expert judgment
C.Quantitative risk analysis and modeling techniques
D.Organizational process assets

Question 382

An organization must make a choice among multiple options to respond to a risk. The stakeholders cannot agree and decide to postpone the decision. Which of the following risk responses has the organization adopted?

A.Mitigation
B.Transfer
C.Avoidance
D.Acceptance

Question 383

Which of the following is the MAIN reason to continuously monitor IT-related risk?

A.To ensure risk levels are within acceptable limits of the organization's risk appetite and risk tolerance
B.To redefine the risk appetite and risk tolerance levels based on changes in risk factors
C.To help identify root causes of incidents and recommend suitable long-term solutions
D.To update the risk register to reflect changes in levels of identified and new IT-related risk

Question 384

Which of the following is an IT business owner's BEST course of action following an unexpected increase in emergency changes?

A.Validating the adequacy of current processes
B.Evaluating the impact to control objectives
C.Reconfiguring the IT infrastructure
D.Conducting a root cause analysis

Question 385

Which of the following would qualify as a key performance indicator (KPI)?

A.Number of exception requests processed in the past 90 days
B.Number of identified system vulnerabilities
C.Number of attacks against the organization's website
D.Aggregate risk of the organization

Question 381

Question 382

Question 383

Question 384

Question 385

Download PDF File