Exam IT-Risk-Fundamentals Topic 4 Question 56 Discussion

Actual exam question for ISACA's IT-Risk-Fundamentals exam
Question #: 56
Topic #: 4
Which of the following is the MOST likely reason that a list of control deficiencies identified in a recent security assessment would be excluded from an IT risk register?

Suggested Answer: C Vote an answer

The most likely reason to exclude control deficiencies from an IT risk register is that they have already been resolved. The risk register should focus on current risks that require attention or action.
While deficiencies with no business relevance (A) might be lower priority, they could still be relevant to the risk register. Actual misconfigurations (B) are definitely relevant and should be included.

by Augustine at Aug 24, 2025, 06:52 PM

Limited Time Offer

15%

Off

Get Premium IT-Risk-Fundamentals Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10