CRISC Practice Test

CRISC Practice Test practice questions, page 55 of 76, with answer review and explanations.

Question 271

Which of the following processes addresses the risks by their priorities, schedules the project management plan as required, and inserts resources and activities into the budget?

  1. Monitor and Control Risk
  2. Plan risk response
  3. Identify Risks
  4. Qualitative Risk Analysis

Question 272

Out of several risk responses, which of the following risk responses is used for negative risk events?

  1. Share
  2. Enhance
  3. Exploit
  4. Accept

Question 273

Which of the following is the MOST critical security consideration when an enterprise outsource is major part of IT department to a third party whose servers are in foreign company?

  1. A security breach notification may get delayed due to time difference
  2. The enterprise could not be able to monitor the compliance with its internal security and privacy guidelines
  3. Laws and regulations of the country of origin may not be enforceable in foreign country
  4. Additional network intrusion detection sensors should be installed, resulting in additional cost

Question 274

You are the Risk Official in Bluewell Inc. You have detected much vulnerability during risk assessment process. What you should do next?

  1. Prioritize vulnerabilities for remediation solely based on impact.
  2. Handle vulnerabilities as a risk, even though there is no threat.
  3. Analyze the effectiveness of control on the vulnerabilities' basis.
  4. Evaluate vulnerabilities for threat, impact, and cost of mitigation.

Question 275

Assessing the probability and consequences of identified risks to the project objectives, assigning a risk score to each risk, and creating a list of prioritized risks describes which of the following processes?

  1. Qualitative Risk Analysis
  2. Plan Risk Management
  3. Identify Risks
  4. Quantitative Risk Analysis