QUESTION: 1005

Which of the following is the MOST important objective of embedding risk management practices into the initiation phase of the project management life cycle?

To deliver projects on time and on budget
To assess inherent risk
To assess risk throughout the project
To include project risk in the enterprise-wide IT risk profile

Answer(s): C

Reveal Solution Next Question

QUESTION: 1006

Which of the following is the MOST significant indicator of the need to perform a penetration test?

An increase in the number of infrastructure changes
An increase in the number of security incidents
An increase in the number of high-risk audit findings
An increase in the percentage of turnover in IT personnel

Answer(s): A

Reveal Solution Next Question

QUESTION: 1007

Which of the following provides the MOST reliable information to ensure a newly acquired company has appropriate IT controls in place?

Vulnerability assessment
Information system audit
Penetration testing
IT risk assessment

Answer(s): D

Reveal Solution Next Question

Print jobs containing confidential information are sent to a shared network printer located in a secure room. Which of the following is the BEST control to prevent the inappropriate disclosure of confidential information?

Ensuring printer parameters are properly configured
Using video surveillance in the printer room
Using physical controls to access the printer room
Requiring a printer access code for each user

Answer(s): D

Reveal Solution Next Question

Free CRISC Exam Braindumps (page: 252)

QUESTION: 1005

QUESTION: 1006

QUESTION: 1007

QUESTION: 1008