CRISC Practice Test

CRISC Practice Test practice questions, page 30 of 76, with answer review and explanations.

Question 146

What is the IMMEDIATE step after defining set of risk scenarios?

  1. Risk mitigation
  2. Risk monitoring
  3. Risk management
  4. Risk analysis

Question 147

Which of the following statements are true for risk communication? Each correct answer represents a complete solution. (Choose three.)

  1. It requires a practical and deliberate scheduling approach to identify stakeholders, actions, and concerns.
  2. It helps in allocating the information concerning risk among the decision-makers.
  3. It requires investigation and interconnectivity of procedural, legal, social, political, and economic factors.
  4. It defines the issue of what a stakeholder does, not just what it says.

Question 148

Which of the following is the most accurate definition of a project risk?

  1. It is an unknown event that can affect the project scope.
  2. It is an uncertain event or condition within the project execution.
  3. It is an uncertain event that can affect the project costs.
  4. It is an uncertain event that can affect at least one project objective.

Question 149

Which of the following considerations should be taken into account while selecting risk indicators that ensures greater buy-in and ownership?

  1. Lag indicator
  2. Lead indicator
  3. Root cause
  4. Stakeholder

Question 150

Suppose you are working in Techmart Inc. which sells various products through its website. Due to some recent losses, you are trying to identify the most important risks to the Website. Based on feedback from several experts, you have come up with a list. You now want to prioritize these risks. Now in which category you would put the risk concerning the modification of the Website by unauthorized parties.

  1. Ping Flooding Attack
  2. Web defacing
  3. Denial of service attack
  4. FTP Bounce Attack