CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. ISACA
  5. CRISC

Free CRISC Exam Braindumps (page: 93)

Page 93 of 451
PDF with 1871 Questions

Which of the following is the way to verify control effectiveness?

  1. The capability of providing notification of failure.
  2. Whether it is preventive or detective.
  3. Its reliability.
  4. The test results of intended objectives.

Answer(s): D

Explanation:

Control effectiveness requires a process to verify that the control process worked as intended and meets the intended control objectives.
Hence the test result of intended objective helps in verifying effectiveness of control.

Incorrect Answers:
A: Notification of failure does not determine control strength, hence this option is not correct.

B: The type of control, like preventive or detective, does not help determine control effectiveness.

C: Reliability is not an indication of control strength; weak controls can be highly reliable, even if they do not meet the control objective.



What is the most important benefit of classifying information assets?

  1. Linking security requirements to business objectives
  2. Allotting risk ownership
  3. Defining access rights
  4. Identifying controls that should be applied

Answer(s): D

Explanation:

All of the options are directly or indirectly are the advantages of classifying information assets, but the most important benefit amongst them is that appropriate controls can be identified.

Incorrect Answers:
A, B, C: These all are less significant than identifying controls.



You are the project manager of GHT project. A risk event has occurred in your project and you have identified it. Which of the following tasks you would do in reaction to risk event occurrence? Each correct answer represents a part of the solution. Choose three.

  1. Monitor risk
  2. Maintain and initiate incident response plans
  3. Update risk register
  4. Communicate lessons learned from risk events

Answer(s): A,B,D

Explanation:

When the risk events occur then following tasks have to done to react to it: Maintain incident response plans
Monitor risk
Initiate incident response
Communicate lessons learned from risk events

Incorrect Answers:
C: Risk register is updated after applying appropriate risk response and at the time of risk event occurrence.



Which of the following parameters would affect the prioritization of the risk responses and development of the risk response plan? Each correct answer represents a complete solution. Choose three.

  1. Importance of the risk
  2. Time required to mitigate risk.
  3. Effectiveness of the response
  4. Cost of the response to reduce risk within tolerance levels

Answer(s): A,C,D

Explanation:

The prioritization of the risk responses and development of the risk response plan is influenced by several parameters:
Cost of the response to reduce risk within tolerance levels Importance of the risk
Capability to implement the response Effectiveness of the response Efficiency of the response

Incorrect Answers:
B: Time required to mitigate risk does not influence the prioritization of the risk and development of the risk response plan. It affects the scheduled time of the project.



Page 93 of 451



Post your Comments and Discuss ISACA CRISC exam with other Community members:

Fei commented on November 26, 2024
Very good resources
UNITED STATES
upvote

Yingying Li commented on December 02, 2023
Very useful practice tests.
Anonymous
upvote

Stephen commented on August 27, 2023
Can you please share CIMAPRA19-FO2-1 Exam dumps please
Anonymous
upvote

Parsad commented on June 04, 2023
Thank you for the buy 1 get 1 free discount. This helped me a lot. I donot have a lot of money.
INDIA
upvote

Petros commented on May 01, 2023
I could not have passed my certification test without the help of this study guide - highly recommend it!
PORTUGAL
upvote

Bobby commented on January 18, 2022
Passed easily.
UNITED STATES
upvote

Santosh commented on January 29, 2020
Passed my exam today with a score of 798. This is good material.
INDIA
upvote

Arron commented on January 26, 2020
This saved me so much time. The questions and answers are adequate and close to real exam. I like the PDF and its format. Just put it on my iPad and studied while traveling to work. This was my first time using this site and I am pretty happy about their service and price.
GERMANY
upvote

Suresh commented on April 17, 2019
This download is a waste of time . I downloaded the windows app and installed and it is asking to load the test. No documentation provided on how to use the desk top tool. Unable to install on my MAC not Iphone compatible. RE- Admin: Suresh, our website clearly says that the Test Engine software is for Windows only. We have not advertised anywhere in our website saying the Test Engine Software is for MAC as well.
UNITED STATES
upvote