CRISC Practice Test practice questions, page 26 of 76, with answer review and explanations.
Question 126
You are working in an enterprise. You project deals with important files that are stored on the computer. You have identified the risk of the failure of operations. To address this risk of failure, you have guided the system administrator sign off on the daily backup. This scenario is an example of which of the following?
Risk avoidance
Risk transference
Risk acceptance
Risk mitigation
Question 127
Risks to an organization's image are referred to as what kind of risk?
Operational
Financial
Information
Strategic
Question 128
Which of the following steps ensure effective communication of the risk analysis results to relevant stakeholders? Each correct answer represents a complete solution. (Choose three.)
The results should be reported in terms and formats that are useful to support business decisions
Provide decision makers with an understanding of worst-case and most probable scenarios,due diligence exposures and significant reputation, legal or regulatory considerations
Communicate the negative impacts of the events only, it needs more consideration
Communicate the risk-return context clearly
Question 129
You are the product manager in your enterprise. You have identified that new technologies, products and services are introduced in your enterprise time-to-time. What should be done to prevent the efficiency and effectiveness of controls due to these changes?
Receive timely feedback from risk assessments and through key risk indicators, and update controls
Add more controls
Perform Business Impact Analysis (BIA)
Nothing, efficiency and effectiveness of controls are not affected by these changes
Question 130
Which of the following are sub-categories of threat? Each correct answer represents a complete solution. (Choose three.)