Question 1

A failed IT system upgrade project has resulted in the corruption of an organization’s asset inventory database. Which of the following controls BEST mitigates the impact of this incident?

Options :

A : Authentication

B : Encryption

C : Backups

D : Configuration

Answer: C

Question 2

Which of the following would be the result of a significant increase in the motivation of a malicious threat actor?

Options :

A : Increase in risk event likelihood

B : Increase in mitigating control costs

C : Increase in risk event impact

D : Increase in cybersecurity premiums

Answer: A

Question 3

Which of the following should be of GREATEST concern to an organization planning to migrate its customer data warehouse to an offshore operation?

Options :

A : Cross-border flow of information

B : Inadequate vendor risk management

C : Time zone differences and implications

D : Increased business continuity costs

Answer: A

Question 4

You are the project manager of HJT project. Important confidential files of your project are stored on a computer. Keeping the unauthorized access of this computer in mind, you have placed a hidden CCTV in the room, even on having protection password. Which kind of control CCTV is?

Options :

A : Technical control

B : Physical control

C : Administrative control

D : Management control

Answer: B

Question 5

Risk avoidance is the BEST risk treatment strategy when:

Options :

A : proposed mitigation strategies are not technically feasible.

B : insurance can be obtained only with substantial premiums.

C : transfer and mitigation options cost more than they save.

D : the residual risk is outside the organizational risk appetite.

Answer: D

Free CRISC Mock Exam – Practice Online Confidently

Buying Options: