CRISC Practice Test

CRISC Practice Test practice questions, page 58 of 76, with answer review and explanations.

Question 286

Which of the following components ensures that risks are examined for all new proposed change requests in the change control system?

  1. Configuration management
  2. Scope change control
  3. Risk monitoring and control
  4. Integrated change control

Question 287

Which of the following are true for threats? Each correct answer represents a complete solution. (Choose three.)

  1. They can become more imminent as time goes by, or it can diminish
  2. They can result in risks from external sources
  3. They are possibility
  4. They are real
  5. They will arise and stay in place until they are properly dealt.

Question 288

Which of the following statements BEST describes policy?

  1. A minimum threshold of information security controls that must be implemented
  2. A checklist of steps that must be completed to ensure information security
  3. An overall statement of information security scope and direction
  4. A technology-dependent statement of best practices

Question 289

You are the project manager of GHT project. You have analyzed the risk and applied appropriate controls. In turn, you got residual risk as a result of this. Residual risk can be used to determine which of the following?

  1. Status of enterprise's risk
  2. Appropriate controls to be applied next
  3. The area that requires more control
  4. Whether the benefits of such controls outweigh the costs

Question 290

When it appears that a project risk is going to happen, what is this term called?

  1. Issue
  2. Contingency response
  3. Trigger
  4. Threshold