QUESTION: 653

Which of the following is MOST effective against external threats to an organization’s confidential information?

Single sign-on
Strong authentication
Data integrity checking
Intrusion detection system

Answer(s): B

QUESTION: 654

Which of the following will BEST ensure that information security risk factors are mitigated when developing in- house applications?

Include information security control specifications in business cases.
Identify key risk indicators (KRIs) as process output.
Identify information security controls in the requirements analysis.
Design key performance indicators (KPIs) for security in system specifications.

Answer(s): C

Reveal Solution Next Question

QUESTION: 655

A risk practitioner has identified that the organization’s secondary data center does not provide redundancy for a critical application. Who should have the authority to accept the associated risk?

Business continuity director
Business application owner
Disaster recovery manager
Data center manager

Answer(s): B

Reveal Solution Next Question

QUESTION: 656

The GREATEST concern when maintaining a risk register is that:

executive management does not perform periodic reviews.
significant changes in risk factors are excluded.
IT risk is not linked with IT assets.
impacts are recorded in qualitative terms.

Answer(s): B

Reveal Solution Next Question

Free CRISC Exam Braindumps (page: 164)

QUESTION: 653

QUESTION: 654

QUESTION: 655

QUESTION: 656