CRISC Practice Test

CRISC Practice Test practice questions, page 74 of 76, with answer review and explanations.

Question 366

Which negative risk response usually has a contractual agreement?

  1. Sharing
  2. Transference
  3. Mitigation
  4. Exploiting

Question 367

Which of the following is the MOST important aspect to ensure that an accurate risk register is maintained?

  1. Publish the risk register in a knowledge management platform with workflow features that periodically contacts and polls risk assessors to ensure accuracy of content
  2. Perform regular audits by audit personnel and maintain risk register
  3. Submit the risk register to business process owners for review and updating
  4. Monitor key risk indicators, and record the findings in the risk register

Question 368

Which of the following test is BEST to map for confirming the effectiveness of the system access management process?

  1. user accounts to human resources (HR) records.
  2. user accounts to access requests.
  3. the vendor database to user accounts.
  4. access requests to user accounts.

Question 369

Which of the following is the way to verify control effectiveness?

  1. The capability of providing notification of failure.
  2. Whether it is preventive or detective.
  3. Its reliability.
  4. The test results of intended objectives.

Question 370

What is the most important benefit of classifying information assets?

  1. Linking security requirements to business objectives
  2. Allotting risk ownership
  3. Defining access rights
  4. Identifying controls that should be applied