CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. ISACA
  5. CRISC

Free CRISC Exam Braindumps (page: 76)

Page 75 of 451
PDF with 1871 Questions

You are the project manager of GHT project. You identified a risk of noncompliance with regulations due to missing of a number of relatively simple procedures.

The response requires creating the missing procedures and implementing them. In which of the following risk response prioritization should this case be categorized?

  1. Business case to be made
  2. Quick win
  3. Risk avoidance
  4. Deferrals

Answer(s): B

Explanation:

This is categorized as a "quick win" because the allocation of existing resources or a minor resource investment provides measurable benefits. Quick win is very effective and efficient response that addresses medium to high risk.

Incorrect Answers:
A: "Business case to be made" requires careful analysis and management decisions on investments that are more expensive or difficult risk responses to medium to high risk. Here in this scenario, there is only minor investment that is why, it is not "business case to be made".

C: Risk avoidance is a type of risk response and not risk response prioritization option.

D: Deferral addresses costly risk response to a low risk, and hence in this specified scenario it is not used.



What are the PRIMARY objectives of a control?

  1. Detect, recover, and attack
  2. Prevent, respond, and log
  3. Prevent, control, and attack
  4. Prevent, recover, and detect

Answer(s): D

Explanation:

Controls are the policies, procedures, practices and guidelines designed to provide appropriate assurance that business objectives are achieved and undesired events are detected, prevented, and corrected. Controls, or countermeasures, will reduce or neutralize threats or vulnerabilities.

Controls have three primary objectives: Prevent
Recover Detect

Incorrect Answers:
A, B, C: One or more objectives stated in these choices is not correct objective of control.



You work as the project manager for Company Inc. The project on which you are working has several risks that will affect several stakeholder requirements. Which project management plan will define who will be available to share information on the project risks?

  1. Resource Management Plan
  2. Communications Management Plan
  3. Risk Management Plan
  4. Stakeholder management strategy

Answer(s): B

Explanation:

The Communications Management Plan defines, in regard to risk management, who will be available to share information on risks and responses throughout the project.

The Communications Management Plan aims to define the communication necessities for the project and how the information will be circulated. The Communications Management Plan sets the communication structure for the project. This structure provides guidance for communication throughout the project's life and is updated as communication needs change. The Communication Managements Plan identifies and defines the roles of persons concerned with the project. It includes a matrix known as the communication matrix to map the communication requirements of the project.

Incorrect Answers:
A: The Resource Management Plan does not define risk communications.

C: The Risk Management Plan deals with risk identification, analysis, response, and monitoring. D: The stakeholder management strategy does not address risk communications.



Sensitive data has been lost after an employee inadvertently removed a file from the premises, in violation of organizational policy. Which of the following controls MOST likely failed?

  1. Background checks
  2. Awareness training
  3. User access
  4. Policy management

Answer(s): C






Post your Comments and Discuss ISACA CRISC exam with other Community members:

CRISC Discussions & Posts