CRISC Practice Test

CRISC Practice Test practice questions, page 22 of 76, with answer review and explanations.

Question 106

Which of the following is the FOREMOST root cause of project risk? Each correct answer represents a complete solution. (Choose two.)

  1. New system is not meeting the user business needs
  2. Delay in arrival of resources
  3. Lack of discipline in managing the software development process
  4. Selection of unsuitable project methodology

Question 107

You are the project manager of a SGT project. You have been actively communicating and working with the project stakeholders. One of the outputs of the "manage stakeholder expectations" process can actually create new risk events for your project. Which output of the manage stakeholder expectations process can create risks?

  1. Project management plan updates
  2. An organizational process asset updates
  3. Change requests
  4. Project document updates

Question 108

Which of the following characteristics of risk controls can be defined as under? "The separation of controls in the production environment rather than the separation in the design and implementation of the risk"

  1. Trusted source
  2. Secure
  3. Distinct
  4. Independent

Question 109

Shelly is the project manager of the BUF project for her company. In this project Shelly needs to establish some rules to reduce the influence of risk bias during the qualitative risk analysis process. What method can Shelly take to best reduce the influence of risk bias?

  1. Establish risk boundaries
  2. Group stakeholders according to positive and negative stakeholders and then complete the risk analysis
  3. Determine the risk root cause rather than the person identifying the risk events
  4. Establish definitions of the level of probability and impact of risk event

Question 110

You are the IT manager in Bluewell Inc. You identify a new regulation for safeguarding the information processed by a specific type of transaction. What would be the FIRST action you will take?

  1. Assess whether existing controls meet the regulation
  2. Update the existing security privacy policy
  3. Meet with stakeholders to decide how to comply
  4. Analyze the key risk in the compliance process