CRISC Practice Test

CRISC Practice Test practice questions, page 50 of 76, with answer review and explanations.

Question 246

A part of a project deals with the hardware work. As a project manager, you have decided to hire a company to deal with all hardware work on the project. Which type of risk response is this?

  1. Transference
  2. Mitigation
  3. Avoidance
  4. Exploit

Question 247

John works as a project manager for BlueWell Inc. He is determining which risks can affect the project. Which of the following inputs of the identify risks process is useful in identifying risks associated to the time allowances for the activities or projects as a whole, with a width of the range indicating the degrees of risk?

  1. Activity duration estimates
  2. Activity cost estimates
  3. Risk management plan
  4. Schedule management plan

Question 248

Which of the following events refer to loss of integrity? Each correct answer represents a complete solution. (Choose three.)

  1. Someone sees company's secret formula
  2. Someone makes unauthorized changes to a Web site
  3. An e-mail message is modified in transit
  4. A virus infects a file

Question 249

Which of the following should be PRIMARILY considered while designing information systems controls?

  1. The IT strategic plan
  2. The existing IT environment
  3. The organizational strategic plan
  4. The present IT budget

Question 250

Which of the following is the MOST effective inhibitor of relevant and efficient communication?

  1. A false sense of confidence at the top on the degree of actual exposure related to IT and lack of a well-understood direction for risk management from the top down
  2. The perception that the enterprise is trying to cover up known risk from stakeholders
  3. Existence of a blame culture
  4. Misalignment between real risk appetite and translation into policies