CRISC Practice Test

CRISC Practice Test practice questions, page 52 of 76, with answer review and explanations.

Question 256

Your project is an agricultural-based project that deals with plant irrigation systems. You have discovered a byproduct in your project that your organization could use to make a profit. If your organization seizes this opportunity, it would be an example of what risk response?

  1. Enhancing
  2. Positive
  3. Opportunistic
  4. Exploiting

Question 257

Which of the following is true for Single loss expectancy (SLE), Annual rate of occurrence (ARO), and Annual loss expectancy (ALE)?

  1. ALE= ARO/SLE
  2. ARO= SLE/ALE
  3. ARO= ALE*SLE
  4. ALE= ARO*SLE

Question 258

Which of the following statements are true for enterprise's risk management capability maturity level 3?

  1. Workflow tools are used to accelerate risk issues and track decisions
  2. The business knows how IT fits in the enterprise risk universe and the risk portfolio view
  3. The enterprise formally requires continuous improvement of risk management skills, based on clearly defined personal and enterprise goals
  4. Risk management is viewed as a business issue, and both the drawbacks and benefits of risk are recognized

Question 259

You are the project manager of GHT project. You and your team have developed risk responses for those risks with the highest threat to or best opportunity for the project objectives. What are the immediate steps you should follow, after planning for risk response process? Each correct answer represents a complete solution. (Choose three.)

  1. Updating Project management plan and Project document
  2. Applying controls
  3. Updating Risk register
  4. Prepare Risk-related contracts

Question 260

You are using Information system. You have chosen a poor password and also sometimes transmits data over unprotected communication lines. What is this poor quality of password and unsafe transmission referring to?

  1. Probabilities
  2. Threats
  3. Vulnerabilities
  4. Impacts