ISACA Certified in Risk and Information Systems Control - CRISC FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which of the following should be a risk practitioner ' s NEXT action after identifying a high probability of data loss in a system?

A. Purchase cyber insurance from a third party. B. Increase the frequency of incident reporting. C. Enhance the security awareness program. D. Conduct a control assessment.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

Which of the following presents the GREATEST challenge to managing an organization ' s end-user devices?

A. Incompatible end-user devices B. Incomplete end-user device inventory C. Unsupported end-user applications D. Multiple end-user device models

Discussion 0

Correct Answer: C Vote an answer

Question 3

Which of the following is MOST likely to be impacted when a global organization is required by law to implement a new data protection regulation across its operations?

A. Threat profile B. Vulnerability assessment results C. Risk profile D. Risk ownership assignments

Discussion 0

Correct Answer: C Vote an answer

Question 4

The PRIMARY goal of a risk management program is to:

A. facilitate resource availability. B. help ensure objectives are met. C. safeguard corporate assets. D. help prevent operational losses.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

Which of the following would be MOST beneficial as a key risk indicator (KRI)?

A. Negative security return on investment (ROI) B. Annualized loss projections C. Project cost variances D. Current capital allocation reserves

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

When formulating a social media policy lo address information leakage, which of the following is the MOST important concern to address?

A. Sharing company information on social media B. Using social media for personal purposes during working hours C. Using social media to maintain contact with business associates D. Sharing personal information on social media

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Which of the following BEST reduces the risk associated with the theft of a laptop containing sensitive information?

A. Periodic backup B. Data encryption C. Biometrics access control D. Cable lock

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

Which of the following is MOST important to the effectiveness of a senior oversight committee for risk monitoring?

A. Risk governance charter B. Key risk indicators (KRIs) C. Organizational risk appetite D. Cross-business representation

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

During the initial risk identification process for a business application, it is MOST important to include which of the following stakeholders?

A. Internal audit B. Application architecture team C. Business process consumers D. Business process owners

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

An organization is participating in an industry benchmarking study that involves providing customer transaction records for analysis Which of the following is the MOST important control to ensure the privacy of customer information?

A. Nondisclosure agreements (NDAs) B. Data cleansing C. Data encryption D. Data anonymization

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 11

In a DevOps environment, a container does not pass dynamic application security testing (DAST). How should this situation be categorized?

A. As a risk scenario B. As a risk event C. As an incident D. As an error

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 12

Which of the following approaches to bring your own device (BYOD) service delivery provides the BEST protection from data loss?

A. Penetration testing and session timeouts B. Enable data wipe capabilities C. Implement remote monitoring D. Enforce strong passwords and data encryption

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 13

Which of the following contributes MOST to the effective implementation of risk responses?

A. Detailed standards and procedures B. Comparable industry risk trends C. Appropriate resources D. Clear understanding of the risk

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 14

The PRIMARY benefit associated with key risk indicators (KRls) is that they:

A. benchmark the organization ' s risk profile. B. enable ongoing monitoring of emerging risk. C. help an organization identify emerging threats. D. identify trends in the organization ' s vulnerabilities.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).