CRISC Practice Test

CRISC Practice Test practice questions, page 29 of 76, with answer review and explanations.

Question 141

Which of the following vulnerability assessment software can check for weak passwords on the network?

  1. Password cracker
  2. Antivirus software
  3. Anti-spyware software
  4. Wireshark

Question 142

Which of the following is NOT true for risk governance?

  1. Risk governance is based on the principles of cooperation, participation, mitigation and sustainability, and is adopted to achieve more effective risk management.
  2. Risk governance requires reporting once a year.
  3. Risk governance seeks to reduce risk exposure and vulnerability by filling gaps in risk policy.
  4. Risk governance is a systemic approach to decision making processes associated to natural and technological risks.

Question 143

You are the project manager of HGT project. You have identified project risks and applied appropriate response for its mitigation. You noticed a risk generated as a result of applying response. What this resulting risk is known as?

  1. Pure risk
  2. Secondary risk
  3. Response risk
  4. High risk

Question 144

What are the various outputs of risk response?

  1. Risk Priority Number
  2. Residual risk
  3. Risk register updates
  4. Project management plan and Project document updates
  5. Risk-related contract decisions

Question 145

Which of the following is an output of risk assessment process?

  1. Identification of risk
  2. Identification of appropriate controls
  3. Mitigated risk
  4. Enterprise left with residual risk