CRISC Practice Test

CRISC Practice Test practice questions, page 21 of 76, with answer review and explanations.

Question 101

Fred is the project manager of a large project in his organization. Fred needs to begin planning the risk management plan with the project team and key stakeholders. Which plan risk management process tool and technique should Fred use to plan risk management?

  1. Information gathering techniques
  2. Data gathering and representation techniques
  3. Planning meetings and analysis
  4. Variance and trend analysis

Question 102

Which of the following is the HIGHEST risk of a policy that inadequately defines data and system ownership?

  1. User management coordination does not exist
  2. Audit recommendations may not be implemented
  3. Users may have unauthorized access to originate, modify or delete data
  4. Specific user accountability cannot be established

Question 103

Marie has identified a risk event in her project that needs a mitigation response. Her response actually creates a new risk event that must now be analyzed and planned for. What term is given to this newly created risk event?

  1. Residual risk
  2. Secondary risk
  3. Infinitive risk
  4. Populated risk

Question 104

Which one of the following is the only output for the qualitative risk analysis process?

  1. Project management plan
  2. Risk register updates
  3. Organizational process assets
  4. Enterprise environmental factors

Question 105

FISMA requires federal agencies to protect IT systems and data. How often should compliance be audited by an external organization?

  1. Annually
  2. Quarterly
  3. Every three years
  4. Never