CRISC Practice Test

CRISC Practice Test practice questions, page 51 of 76, with answer review and explanations.

Question 251

You and your project team are identifying the risks that may exist within your project. Some of the risks are small risks that won't affect your project much if they happen. What should you do with these identified risk events?

  1. These risks can be dismissed.
  2. These risks can be accepted.
  3. These risks can be added to a low priority risk watch list.
  4. All risks must have a valid, documented risk response.

Question 252

You are the project manager of your enterprise. You have introduced an intrusion detection system for the control. You have identified a warning of violation of security policies of your enterprise. What type of control is an intrusion detection system (IDS)?

  1. Detective
  2. Corrective
  3. Preventative
  4. Recovery

Question 253

What are the functions of audit and accountability control? Each correct answer represents a complete solution. (Choose three.)

  1. Provides details on how to protect the audit logs
  2. Implement effective access control
  3. Implement an effective audit program
  4. Provides details on how to determine what to audit

Question 254

Which among the following acts as a trigger for risk response process?

  1. Risk level increases above risk appetite
  2. Risk level increase above risk tolerance
  3. Risk level equates risk appetite
  4. Risk level equates the risk tolerance

Question 255

What is the value of exposure factor if the asset is lost completely?

  1. 1
  2. Infinity
  3. 10
  4. 0