Free ISACA IT-Risk-Fundamentals Exam Dumps Questions & Answers

Which of the following is MOST likely to expose an organization to adverse threats?

• A.Complex enterprise architecture
• B.Incomplete cybersecurity training records
• C.Improperly configured network devices

An enterprise is currently experiencing an unacceptable 8% processing error rate and desires to manage risk by establishing a policy that error rates cannot exceed 5%. In addition, management wants to be alerted when error rates meet or exceed 4%. The enterprise should set a key performance indicator (KPI) metric at which of the following levels?

• A.5%
• B.4%
• C.8%

Which of the following is the MAIN reason to include previously overlooked risk in a risk report?

• A.Assurance is needed that the risk dashboard is complete and comprehensive.
• B.Overlooked or ignored risk may become relevant in the future.
• C.The risk report must contain the current state of all risk.

Which of the following is a benefit of using a top-down approach when developing risk scenarios?

• A.The development process is simplified because it includes only I&T-related events.
• B.Focus at the enterprise level makes it easier to achieve management support.
• C.Identification and assignment of risk ownership for mitigation plans can be done more quickly.

Key risk indicators (KRIs) are metrics designed to:

• A.be a direct measure of risk for each business line.
• B.alert there is an increased chance of exceeding risk appetite.
• C.measure current risk levels in comparison to past levels.