Question 1

Which of the following is the HIGHEST risk of a policy that inadequately defines data and system ownership?

Options :

A : User management coordination does not exist

B : Audit recommendations may not be implemented

C : Users may have unauthorized access to originate, modify or delete data

D : Specific user accountability cannot be established

Answer: C

Question 2

Which of the following provides a risk practitioner with the MOST reliable evidence of a third-party’s ability to protect the confidentiality of sensitive corporate information?

Options :

A : External audit reports

B : Internal audit reports

C : Control self-assessment (CSA) results

D : A signed nondisclosure agreement (NDA)

Answer: A

Question 3

A PRIMARY advantage of involving business management in evaluating and managing risk is that management:

Options :

A : can make better informed business decisions

B : better understands the system architecture

C : can balance technical and business risk

D : is more objective than risk management

Answer: A

Question 4

Which of the following assets are the examples of intangible assets of an enterprise?

Each correct answer represents a complete solution. (Choose two.)

Options :

A : Customer trust

B : Information

C : People

D : Infrastructure

Answer: A,B

Question 5

When presenting risk, the BEST method to ensure that the risk is measurable against the organization's risk appetite is through the use of a:

Options :

A : technology strategy plan

B : cause-and-effect diagram

C : risk map

D : maturity model

Answer: C

Free CRISC Mock Exam – Practice Online Confidently

Buying Options: