Isaca
CRISC
Q1:
Which of the following is the MOST important characteristic of a key risk indicator (KRI) to enable decision-making?
○
A
Monitoring the risk until the exposure is reduced○
B
Setting minimum sample sizes to ensure accuracy○
C
Listing alternative causes for risk events○
D
Illustrating changes in risk trends
Isaca
CRISC
Q2:
Which of the following is the BEST way to protect sensitive data from administrators within a public cloud?
○
A
Use an encrypted tunnel lo connect to the cloud.○
B
Encrypt the data in the cloud database.○
C
Encrypt physical hard drives within the cloud.○
D
Encrypt data before it leaves the organization.
Isaca
CRISC
Q3:
Which of the following is the result of a realized risk scenario?
○
A
Threat event○
B
Vulnerability event○
C
Technical event○
D
Loss event
Isaca
CRISC
Q4:
Which of the following is MOST helpful in identifying loss magnitude during risk analysis of a new system?
○
A
Recovery time objective (RTO)○
B
Cost-benefit analysis○
C
Business impact analysis (BIA)○
D
Cyber insurance coverage
Isaca
CRISC
Q5:
The MOST important measure of the effectiveness of risk management in project implementation is the percentage of projects:
○
A
introduced into production without high-risk issues.○
B
having the risk register updated regularly.○
C
having key risk indicators (KRIs) established to measure risk.○
D
having an action plan to remediate overdue issues.