CRISC Practice Test

CRISC Practice Test practice questions, page 12 of 76, with answer review and explanations.

Question 56

Your project is an agricultural-based project that deals with plant irrigation systems. You have discovered a byproduct in your project that your organization could use to make a profit. If your organization seizes this opportunity it would be an example of what risk response?

  1. Enhancing
  2. Positive
  3. Opportunistic
  4. Exploiting

Question 57

Which of the following is true for Single loss expectancy (SLE), Annual rate of occurrence (ARO), and Annual loss expectancy (ALE)?

  1. ALE= ARO/SLE
  2. ARO= SLE/ALE
  3. ARO= ALE*SLE
  4. ALE= ARO*SLE

Question 58

Which of the following statements are true for enterprise's risk management capability maturity level 3?

  1. Workflow tools are used to accelerate risk issues and track decisions
  2. The business knows how IT fits in the enterprise risk universe and the risk portfolio view
  3. The enterprise formally requires continuous improvement of risk management skills, based on clearly defined personal and enterprise goals
  4. Risk management is viewed as a business issue, and both the drawbacks and benefits of risk are recognized

Question 59

Which of the following role carriers is accounted for analyzing risks, maintaining risk profile, and risk-aware decisions?

  1. Business management
  2. Business process owner
  3. Chief information officer (CIO)
  4. Chief risk officer (CRO)

Question 60

You are using Information system. You have chosen a poor password and also sometimes transmits data over unprotected communication lines. What is this poor quality of password and unsafe transmission refers to?

  1. Probabilities
  2. Threats
  3. Vulnerabilities
  4. Impacts