CRISC Practice Test

CRISC Practice Test practice questions, page 39 of 76, with answer review and explanations.

Question 191

Jane, the Director of Sales, contacts you and demands that you add a new feature to the software your project team is creating for the organization. In the meeting she tells you how important the scope change would be. You explain to her that the software is almost finished and adding a change now could cause the deliverable to be late, cost additional funds, and would probably introduce new risks to the project. Jane stands up and says to you, "I am the Director of Sales and this change will happen in the project." And then she leaves the room. What should you do with this verbal demand for a change in the project?

  1. Include the change in the project scope immediately.
  2. Direct your project team to include the change if they have time.
  3. Do not implement the verbal change request.
  4. Report Jane to your project sponsor and then include the change.

Question 192

You are the risk professional in Bluewell Inc. A risk is identified and enterprise wants to quickly implement control by applying technical solution that deviates from the company's policies. What you should do?

  1. Recommend against implementation because it violates the company's policies
  2. Recommend revision of the current policy
  3. Recommend a risk assessment and subsequent implementation only if residual risk is accepted
  4. Conduct a risk assessment and allow or disallow based on the outcome

Question 193

Jane is the project manager of the NHJ Project for his company. He has identified several positive risk events within his project and he thinks these events can save the project time and money. Positive risk events, such as these within the NHJ Project are referred to as?

  1. Contingency risks
  2. Benefits
  3. Residual risk
  4. Opportunities

Question 194

During qualitative risk analysis you want to define the risk urgency assessment. All of the following are indicators of risk priority except for which one?

  1. Warning signs
  2. Symptoms
  3. Risk rating
  4. Cost of the project

Question 195

Which of the following phases is involved in the Data Extraction, Validation, Aggregation and Analysis?

  1. Risk response and Risk monitoring
  2. Requirements gathering, Data access, Data validation, Data analysis, and Reporting and corrective action
  3. Data access and Data validation
  4. Risk identification, Risk assessment, Risk response and Risk monitoring