CRISC Practice Test

CRISC Practice Test practice questions, page 71 of 76, with answer review and explanations.

Question 351

Which of the following is the BEST way to determine the ongoing efficiency of control processes?

  1. Interview process owners
  2. Review the risk register
  3. Perform annual risk assessments
  4. Analyze key performance indicators (KPIs)

Question 352

You are the project manager of the GHT project. You are accessing data for further analysis. You have chosen such a data extraction method in which management monitors its own controls. Which of the following data extraction methods you are using here?

  1. Extracting data directly from the source systems after system owner approval
  2. Extracting data from the system custodian (IT) after system owner approval
  3. Extracting data from risk register
  4. Extracting data from lesson learned register

Question 353

You are the project manager for your organization to install new workstations, servers, and cabling throughout a new building, where your company will be moving into. The vendor for the project informs you that the cost of the cabling has increased due to some reason. This new cost will cause the cost of your project to increase by nearly eight percent. What change control system should the costs be entered into for review?

  1. Cost change control system
  2. Contract change control system
  3. Scope change control system
  4. Only changes to the project scope should pass through a change control system.

Question 354

When a risk cannot be sufficiently mitigated through manual or automatic controls, which of the following options will BEST protect the enterprise from the potential financial impact of the risk?

  1. Updating the IT risk registry
  2. Insuring against the risk
  3. Outsourcing the related business process to a third party
  4. Improving staff-training in the risk area

Question 355

You are the risk official at Bluewell Inc. There are some risks that are posing threat on your enterprise. You are measuring exposure of those risk factors, which has the highest potential, by examining the extent to which the uncertainty of each element affects the object under consideration when all other uncertain elements are held at their baseline values. Which type of analysis you are performing?

  1. Sensitivity analysis
  2. Fault tree analysis
  3. Cause-and-effect analysis
  4. Scenario analysis