Question 1

Publishing l&T risk-related policies and procedures BEST enables an enterprise to:

Options :

A : set the overall expectations for risk management.

B : hold management accountable for risk loss events.

C : ensure regulatory compliance and adherence to risk standards.

Answer: A

Question 2

The status of IT-related risk should to be communicated to the relevant stakeholders and:

Options :

A : Express risk in a manner that is useful to support business decisions.

B : Never updated

C : Should focus on best-case and least-probable scenarios.

D : Be as concise as possible and as such exclude probabilities of gain and loss.

Answer: A

Question 3

What does the risk universe consider in understanding I&T-related risk?

Options :

A : The main components of risk management

B : Only the business processes of the enterprise

C : The value chain of the enterprise

D : Only the mission and enterprise objectives

Answer: C

Question 4

Which statement about controls is true?

Options :

A : Controls are not essential for risk mitigation

B : Controls can only be categorized as technical in a control matrix

C : Controls prevent, detect, and correct damage resulting from an incident but do not enable recovery

D : Controls are essential for risk mitigation and include both proactive and reactive measures

Answer: D

Question 5

Potential losses resulting from employee errors and system failures are examples of:

Options :

A : operational risk.

B : market risk.

C : strategic risk.

Answer: A

Free IT-Risk-Fundamentals Mock Exam – Practice Online Confidently