CRISC Practice Test

CRISC Practice Test practice questions, page 60 of 76, with answer review and explanations.

Question 296

Which of the following is the best reason for performing risk assessment?

  1. To determine the present state of risk
  2. To analyze the effect on the business
  3. To satisfy regulatory requirements
  4. To budget appropriately for the application of various controls

Question 297

You are the project manager of GHT project. You identified a risk of noncompliance with regulations due to missing of a number of relatively simple procedures. The response requires creating the missing procedures and implementing them. In which of the following risk response prioritization should this case be categorized?

  1. Business case to be made
  2. Quick win
  3. Risk avoidance
  4. Deferrals

Question 298

What are the PRIMARY objectives of a control?

  1. Detect, recover, and attack
  2. Prevent, respond, and log
  3. Prevent, control, and attack
  4. Prevent, recover, and detect

Question 299

Which of the following is the PRIMARY role of a data custodian in the risk management process?

  1. Ensuring data is protected according to the classification
  2. Being accountable for control design
  3. Reporting and escalating data breaches to senior management
  4. Performing periodic data reviews according to policy

Question 300

Sensitive data has been lost after an employee inadvertently removed a file from the premises, in violation of organizational policy. Which of the following controls MOST likely failed?

  1. Background checks
  2. Awareness training
  3. User access
  4. Policy management