CRISC Practice Test

CRISC Practice Test practice questions, page 70 of 76, with answer review and explanations.

Question 346

Henry is the project manager of the QBG Project for his company. This project has a budget of $4,576,900 and is expected to last 18 months to complete. The CIO, a stakeholder in the project, has introduced a scope change request for additional deliverables as part of the project work. What component of the change control system would review the proposed changes' impact on the features and functions of the project's product?

  1. Cost change control system
  2. Configuration management system
  3. Scope change control system
  4. Integrated change control

Question 347

What are the key control activities to be done to ensure business alignment? Each correct answer represents a part of the solution. (Choose two.)

  1. Define the business requirements for the management of data by IT
  2. Conduct IT continuity tests on a regular basis or when there are major changes in the IT infrastructure
  3. Periodically identify critical data that affect business operations
  4. Establish an independent test task force that keeps track of all events

Question 348

Which of the following statements is true for risk analysis?

  1. Risk analysis should assume an equal degree of protection for all assets.
  2. Risk analysis should give more weight to the likelihood than the size of loss.
  3. Risk analysis should limit the scope to a benchmark of similar companies
  4. Risk analysis should address the potential size and likelihood of loss.

Question 349

You are working in Bluewell Inc. which make advertisement Websites. Someone had made unauthorized changes to your Website. Which of the following terms refers to this type of loss?

  1. Loss of confidentiality
  2. Loss of integrity
  3. Loss of availability
  4. Loss of revenue

Question 350

Which of the following is NOT true for Key Risk Indicators?

  1. They are selected as the prime monitoring indicators for the enterprise
  2. They help avoid having to manage and report on an excessively large number of risk indicators
  3. The complete set of KRIs should also balance indicators for risk, root causes and business impact.
  4. They are monitored annually