CRISC Practice Test

CRISC Practice Test practice questions, page 36 of 76, with answer review and explanations.

Question 176

Which of the following are the security plans adopted by the organization? Each correct answer represents a complete solution. (Choose three.)

  1. Business continuity plan
  2. Backup plan
  3. Disaster recovery plan
  4. Project management plan

Question 177

Which of the following guidelines should be followed for effective risk management? Each correct answer represents a complete solution. (Choose three.)

  1. Promote and support consistent performance in risk management
  2. Promote fair and open communication
  3. Focus on enterprise's objective
  4. Balance the costs and benefits of managing risk

Question 178

According to the Section-302 of the Sarbanes-Oxley Act of 2002, what does certification of reports implies? Each correct answer represents a complete solution. (Choose three.)

  1. The signing officer has evaluated the effectiveness of the issuer's internal controls as of a date at the time to report.
  2. The financial statement does not contain any materially untrue or misleading information.
  3. The signing officer has reviewed the report.
  4. The signing officer has presented in the report their conclusions about the effectiveness of their internal controls based on their evaluation as of that date.

Question 179

Thomas is a key stakeholder in your project. Thomas has requested several changes to the project scope for the project you are managing. Upon review of the proposed changes, you have discovered that these new requirements are laden with risks and you recommend to the change control board that the changes be excluded from the project scope. The change control board agrees with you. What component of the change control system communicates the approval or denial of a proposed change request?

  1. Configuration management system
  2. Integrated change control
  3. Change log
  4. Scope change control system

Question 180

Which of the following process ensures that the risk response strategy remains active and that proposed controls are implemented according to schedule?

  1. Risk management
  2. Risk response integration
  3. Risk response implementation
  4. Risk response tracking