CRISC Practice Test

CRISC Practice Test practice questions, page 41 of 76, with answer review and explanations.

Question 201

To which level the risk should be reduced to accomplish the objective of risk management?

  1. To a level where ALE is lower than SLE
  2. To a level where ARO equals SLE
  3. To a level that an organization can accept
  4. To a level that an organization can mitigate

Question 202

You are the project manager of GHT project. Your hardware vendor left you a voicemail saying that the delivery of the equipment you have ordered would not arrive on time. You identified a risk response strategy for this risk and have arranged for a local company to lease you the needed equipment until yours arrives. This is an example of which risk response strategy?

  1. Avoid
  2. Transfer
  3. Acceptance
  4. Mitigate

Question 203

Who is at the BEST authority to develop the priorities and identify what risks and impacts would occur if there were loss of the organization's private information?

  1. External regulatory agencies
  2. Internal auditor
  3. Business process owners
  4. Security management

Question 204

You are the project manager for TTP project. You are in the Identify Risks process. You have to create the risk register. Which of the following are included in the risk register? Each correct answer represents a complete solution. (Choose two.)

  1. List of potential responses
  2. List of key stakeholders
  3. List of mitigation techniques
  4. List of identified risks

Question 205

You work as a project manager for BlueWell Inc. You are about to complete the quantitative risk analysis process for your project. You can use three available tools and techniques to complete this process. Which one of the following is NOT a tool or technique that is appropriate for the quantitative risk analysis process?

  1. Data gathering and representation techniques
  2. Expert judgment
  3. Quantitative risk analysis and modeling techniques
  4. Organizational process assets