CRISC Practice Test

CRISC Practice Test practice questions, page 9 of 76, with answer review and explanations.

Question 41

Which of the following controls do NOT come under technical class of control?

  1. Program management control
  2. System and Communications Protection control
  3. Identification and Authentication control
  4. Access Control

Question 42

Mary is a project manager in her organization. On her current project she is working with her project team and other key stakeholders to identify the risks within the project. She is currently aiming to create a comprehensive list of project risks so she is using a facilitator to help generate ideas about project risks. What risk identification method is Mary likely using?

  1. Delphi Techniques
  2. Expert judgment
  3. Brainstorming
  4. Checklist analysis

Question 43

Which of the following is an administrative control?

  1. Water detection
  2. Reasonableness check
  3. Data loss prevention program
  4. Session timeout

Question 44

You are the project manager of the NHH Project. You are working with the project team to create a plan to document the procedures to manage risks throughout the project. This document will define how risks will be identified and quantified. It will also define how contingency plans will be implemented by the project team. What document do you and your team is creating in this scenario?

  1. Project plan
  2. Resource management plan
  3. Project management plan
  4. Risk management plan

Question 45

Where are all risks and risk responses documented as the project progresses?

  1. Risk management plan
  2. Project management plan
  3. Risk response plan
  4. Risk register