CRISC Practice Test

CRISC Practice Test practice questions, page 5 of 76, with answer review and explanations.

Question 21

An enterprise has identified risk events in a project. While responding to these identified risk events, which among the following stakeholders is MOST important for reviewing risk response options to an IT risk.

  1. Information security managers
  2. Internal auditors
  3. Incident response team members
  4. Business managers

Question 22

Which of the following is a technique that provides a systematic description of the combination of unwanted occurrences in a system?

  1. Sensitivity analysis
  2. Scenario analysis
  3. Fault tree analysis
  4. Cause and effect analysis

Question 23

What is the process for selecting and implementing measures to impact risk called?

  1. Risk Treatment
  2. Control
  3. Risk Assessment
  4. Risk Management

Question 24

Which section of the Sarbanes-Oxley Act specifies "Periodic financial reports must be certified by CEO and CFO"?

  1. Section 302
  2. Section 404
  3. Section 203
  4. Section 409

Question 25

What is the PRIMARY need for effectively assessing controls?

  1. Control's alignment with operating environment
  2. Control's design effectiveness
  3. Control's objective achievement
  4. Control's operating effectiveness