CRISC Practice Test

CRISC Practice Test practice questions, page 40 of 76, with answer review and explanations.

Question 196

Which of the following items is considered as an objective of the three dimensional model within the framework described in COSO ERM?

  1. Risk assessment
  2. Financial reporting
  3. Control environment
  4. Monitoring

Question 197

NIST SP 800-53 identifies controls in three primary classes. What are they?

  1. Technical, Administrative, and Environmental
  2. Preventative, Detective, and Corrective
  3. Technical, Operational, and Management
  4. Administrative, Technical, and Operational

Question 198

While defining the risk management strategies, what are the major parts to be determined first? Each correct answer represents a part of the solution. (Choose two.)

  1. IT architecture complexity
  2. Organizational objectives
  3. Risk tolerance
  4. Risk assessment criteria

Question 199

Which of the following are true for quantitative analysis? Each correct answer represents a complete solution. (Choose three.)

  1. Determines risk factors in terms of high/medium/low.
  2. Produces statistically reliable results
  3. Allows discovery of which phenomena are likely to be genuine and which are merely chance occurrences
  4. Allows data to be classified and counted

Question 200

Ned is the project manager of the HNN project for your company. Ned has asked you to help him complete some probability distributions for his project. What portion of the project will you most likely use for probability distributions?

  1. Bias towards risk in new resources
  2. Risk probability and impact matrixes
  3. Uncertainty in values such as duration of schedule activities
  4. Risk identification