Instant Access ISACA.CRISC.v2022-11-14.q305 Actual Practice Test Engine for Free (Page 19)

Question 86

Which of the following provides the MOST up-to-date information about the effectiveness of an organization's overall IT control environment?

A.Internal audit findings
B.Key performance indicators (KPIs)
C.Periodic penetration testing
D.Risk heat maps

Question 87

A large organization needs to report risk at all levels for a new centralized visualization project to reduce cost and improve performance. Which of the following would MOST effectively represent the overall risk of the project to senior management?

A.Aggregated key performance indicators (KPls)
B.Key risk indicators (KRIs)
C.Risk heat map
D.Centralized risk register

Question 88

Which of the following statements is NOT true regarding the risk management plan?

A.The risk management plan is an output of the Plan Risk Management process.
B.The risk management plan is an input to all the remaining risk-planning processes.
C.The risk management plan includes a description of the risk responses and triggers.
D.The risk management plan includes thresholds, scoring and interpretation methods, responsible parties, and budgets.

Question 89

What are the requirements for creating risk scenarios? Each correct answer represents a part of the solution.
Choose three.

A.Determination of cause and effect
B.Determination of the value of business process at risk
C.Potential threats and vulnerabilities that could cause loss
D.Determination of the value of an asset

Question 90

What are the steps that are involved in articulating risks? Each correct answer represents a complete solution. Choose three.

A.Identify business opportunities.
B.Identify the response
C.Communicate risk analysis results and report risk management activities and the state of compliance.
D.Interpret independent risk assessment findings.

Question 86

Question 87

Question 88

Question 89

Question 90

Download PDF File