Question 1

Which of the following is MOST helpful for communicating the significance of IT-related risk to business managers?

Options :

A : Industry trends

B : Risk awareness training

C : Risk scenarios

D : Event-driven risk reporting

Answer: C

Question 2

You are the project manager of GHT project. You have initiated the project and conducted the feasibility study. What result would you get after conducting feasibility study?

Each correct answer represents a complete solution. (Choose two.)

Options :

A : Recommend alternatives and course of action

B : Risk response plan

C : Project management plan

D : Results of criteria analyzed, like costs, benefits, risk, resources required and organizational impact

Answer: A,D

Question 3

You are the project manager of GHT project. You are performing cost and benefit analysis of control. You come across the result that costs of specific controls exceed the benefits of mitigating a given risk. What is the BEST action would you choose in this scenario?

Options :

A : The enterprise may apply the appropriate control anyway.

B : The enterprise should adopt corrective control.

C : The enterprise may choose to accept the risk rather than incur the cost of mitigation.

D : The enterprise should exploit the risk.

Answer: C

Question 4

The MAIN benefit of defining an organization's risk tolerance and appetite is that it helps to ensure:

Options :

A : a top-down approach to risk management is used.

B : risk is managed to an acceptable level.

C : risk is assessed within acceptable tolerance.

D : key risk indicators (KRIs) are aligned with risk scenarios.

Answer: B

Question 5

A highly regulated organization acquired a medical technology startup company that processes sensitive personal information with weak data protection controls.

Which of the following is the BEST way for the acquiring company to reduce its risk while still enabling the flexibility needed by the startup company?

Options :

A : Implement a firewall and isolate the environment from the parent company-s network.

B : Classify and protect the data according to the parent company-s internal standards.

C : Have the data privacy officer review the startup company-s data protection policies.

D : Identify previous data breaches using the startup company-s audit reports.

Answer: C

Free CRISC Mock Exam – Practice Online Confidently

Buying Options: