Latest Feb-2023 ISACA CRISC Dumps Updated 1014 Questions [Q164-Q178]

Rate this post

Latest Feb-2023 ISACA CRISC Dumps Updated 1014 Questions

PDF Download Free of CRISC Valid Practice Test Questions

NEW QUESTION 164
Which of the following provides the MOST up-to-date information about the effectiveness of an organization’s overall IT control environment?

Periodic penetration testing.

Key performance indicators (KPIs).

Internal audit findings.

Risk heat maps.

NEW QUESTION 165
You work as the project manager for Company Inc. The project on which you are working has several risks that will affect several stakeholder requirements. Which project management plan will define who will be available to share information on the project risks?

Resource Management Plan

Communications Management Plan

Risk Management Plan

Stakeholder management strategy

NEW QUESTION 166
Which of the following is the MOST important benefit of key risk indicators (KRIs)’

Assisting in continually optimizing risk governance

Enabling the documentation and analysis of trends

Ensuring compliance with regulatory requirements

Providing an early warning to take proactive actions

NEW QUESTION 167
An organization has decided to use an external auditor to review the control environment of an outsourced service provider. The BEST control criteria to evaluate the provider would be based on:

a recognized industry control framework

guidance provided by the external auditor

the service provider’s existing controls

The organization’s specific control requirements

NEW QUESTION 168
You are the project manager of your enterprise. You have introduced an intrusion detection system for the control. You have identified a warning of violation of security policies of your enterprise. What type of control is an intrusion detection system (IDS)?

Detective

Corrective

Preventative

Recovery

Explanation:
An intrusion detection system (IDS) is a device or software application that monitors network and/or system activities for malicious activities or policy violations and produces reports to a Management Station. Some systems may attempt to stop an intrusion attempt but this is neither required nor expected of a monitoring system. Intrusion detection and prevention systems (IDPS) are primarily focused on identifying possible incidents, logging information about them, and reporting attempts. In addition, organizations use IDPS for other purposes,such as identifying problems with security policies, documenting existing threats, and deterring individuals from violating security policies. As IDS detects and gives warning when the violation of security policies of the enterprise occurs, it is a detective control.

NEW QUESTION 169
Risks with low ratings of probability and impact are included for future monitoring in which of the following?

Risk alarm

Observation list

Watch-list

Risk register

NEW QUESTION 170
Which of the following is a PRIMARY benefit of engaging the risk owner during the risk assessment process?

Accurate measurement of loss impact

Early detection of emerging threats

Identification of controls gaps that may lead to noncompliance

Prioritization of risk action plans across departments

NEW QUESTION 171
Which of the following provides The MOST useful information when determining a risk management program’s maturity level?

Risk assessment results

A recently reviewed risk register

Key performance indicators (KPIs)

The organization’s risk framework

NEW QUESTION 172
Which of the following BEST measures the operational effectiveness of risk management capabilities?

Capability maturity models (CMMs)

Metric thresholds

Key risk indicators (KRIs)

Key performance indicators (KPIs)

NEW QUESTION 173
Which of the following is the first MOST step in the risk assessment process?

Identification of assets

Identification of threats

Identification of threat sources

Identification of vulnerabilities

NEW QUESTION 174
You work as a project manager for SoftTech Inc. You are working with the project stakeholders to begin the qualitative risk analysis process. Which of the following inputs will be needed for the qualitative risk analysis process in your project?
Each correct answer represents a complete solution. (Choose three.)

Project scope statement

Cost management plan

Risk register

Organizational process assets

NEW QUESTION 175
Which of the following is the MOST important consideration when developing risk strategies?

Organization’s industry sector

Long-term organizational goals

Concerns of the business process owners

History of risk events

NEW QUESTION 176
Which of the following is MOST appropriate to prevent unauthorized retrieval of confidential information stored in a business application system?

Implement segregation of duties.

Enforce an internal data access policy.

Enforce the use of digital signatures.

Apply single sign-on for access control.

NEW QUESTION 177
Shawn is the project manager of the HWT project. In this project Shawn’s team reports that they have found a way to complete the project work cheaply than what was originally estimated earlier. The project team presents a new software that will help to automate the project work. While the software and the associated training costs $25,000 it will save the project nearly $65,000 in total costs. Shawn agrees to the software and changes the project management plan accordingly. What type of risk response had been used by him?

Avoiding

Accepting

Exploiting

Enhancing

Explanation:
A risk event is been exploited so as to identify the opportunities for positive impacts. Exploit response is one of the strategies to negate risks or threats that appear in a project. This strategy may be selected for risks with positive impacts where the organization wishes to ensure that the opportunity is realized. Exploiting a risk event provides opportunities for positive impact on a project. Assigning more talented resources to the project to reduce the time to completion is an example of exploit response.

NEW QUESTION 178
Your project change control board has approved several scope changes that will drastically alter your project plan. You and the project team set about updating the project scope, the WBS, the WBS dictionary, the activity list, and the project network diagram. There are also some changes caused to the project risks, communication, and vendors. What also should the project manager update based on these scope changes?

Stakeholder identification

Vendor selection process

Quality baseline

Process improvement plan