CRISC Practice Test

CRISC Practice Test practice questions, page 11 of 76, with answer review and explanations.

Question 51

You and your project team are identifying the risks that may exist within your project. Some of the risks are small risks that won't affect your project much if they happen. What should you do with these identified risk events?

  1. These risks can be dismissed.
  2. These risks can be accepted.
  3. These risks can be added to a low priority risk watch list.
  4. All risks must have a valid, documented risk response.

Question 52

You are the project manager of your enterprise. You have introduced an intrusion detection system for the control. You have identified a warning of violation of security policies of your enterprise. What type of control is an intrusion detection system (IDS)?

  1. Detective
  2. Corrective
  3. Preventative
  4. Recovery

Question 53

What are the functions of audit and accountability control? Each correct answer represents a complete solution. (Choose three.)

  1. Provides details on how to protect the audit logs
  2. Implement effective access control
  3. Implement an effective audit program
  4. Provides details on how to determine what to audit

Question 54

Which among the following acts as a trigger for risk response process?

  1. Risk level increases above risk appetite
  2. Risk level increase above risk tolerance
  3. Risk level equates risk appetite
  4. Risk level equates the risk tolerance

Question 55

What is the value of exposure factor if the asset is lost completely?

  1. 1
  2. Infinity
  3. 10
  4. 0