[Jun 04, 2023] Pass CRISC Review Guide, Reliable CRISC Test Engine [Q35-Q58]

NO.35 Which of the following is the BEST indicator of the effectiveness of a control action plan’s implementation?

NO.36 What are the MOST essential attributes of an effective Key control indicator (KCI)?

NO.37 You are working in an enterprise. Assuming that your enterprise periodically compares finished goods inventory levels to the perpetual inventories in its ERP system. What kind of information is being provided by the lack of any significant differences between perpetual levels and actual levels?

NO.38 An organization’s HR department has implemented a policy requiring staff members to take a minimum of five consecutive days leave per year to mitigate the risk of malicious insider activities. Which of the following is the BEST key performance indicator (KPI) of the effectiveness of this policy?

NO.39 Out of several risk responses, which of the following risk responses is used for negative risk events?

NO.40 An organization has experienced a cyber attack that exposed customer personally identifiable information (Pll) and caused extended outages of network services. Which of the following stakeholders are MOST important to include in the cyber response team to determine response actions?

NO.41 Which of the following is the BEST approach for selecting controls to minimize risk?

NO.42 Your project change control board has approved several scope changes that will drastically alter your project plan. You and the project team set about updating the project scope, the WBS, the WBS dictionary, the activity list, and the project network diagram. There are also some changes caused to the project risks, communication, and vendors. What also should the project manager update based on these scope changes?

NO.43 John is the project manager of the NHQ Project for his company. His project has 75 stakeholders, some of which are external to the organization. John needs to make certain that he communicates about risk in the most appropriate method for the external stakeholders. Which project management plan will be the best guide for John to communicate to the external stakeholders?

NO.44 Which of the following is the MAIN benefit of involving stakeholders in the selection of key risk indicators (KRIs)?

NO.45 An IT risk practitioner is evaluating an organization’s change management controls over the last six months. The GREATEST concern would be an increase in:

NO.46 You are the risk professional of your enterprise. You need to calculate potential revenue loss if a certain risks occurs. Your enterprise has an electronic (e-commerce) web site that is producing US $1 million of revenue each day, then if a denial of service (DoS) attack occurs that lasts half a day creates how much loss?

NO.47 In which of the following risk management capability maturity levels does the enterprise takes major business decisions considering the probability of loss and the probability of reward? Each correct answer represents a complete solution. Choose two.

NO.48 An organization has four different projects competing for funding to reduce overall IT risk. Which project should management defer?

NO.49 Stephen is the project manager of the GBB project. He has worked with two subject matter experts and his project team to complete the risk assessment technique. There are approximately 47 risks that have a low probability and a low impact on the project. Which of the following answers best describes what Stephen should do with these risk events?

NO.50 Which of the following is the MOST important consideration when selecting key risk indicators (KRIs) to monitor risk trends over time?

NO.51 Which of the following is true for Single loss expectancy (SLE), Annual rate of occurrence (ARO), and Annual loss expectancy (ALE)?

NO.52 A risk practitioner recently discovered that sensitive data from the production environment is required for testing purposes in non-production environments. Which of the following is the BEST recommendation to address this situation?

NO.53 When updating the risk register after a risk assessment, which of the following is MOST important to include?

NO.54 Which of the following is MOST important to the effectiveness of key performance indicators (KPIs)?

NO.55 Assessing the probability and consequences of identified risks to the project objectives, assigning a risk score to each risk, and creating a list of prioritized risks describes which of the following processes?

NO.56 Which of the following is the HIGHEST risk of a policy that inadequately defines data and system ownership?

NO.57 A control owner has completed a year-long project To strengthen existing controls. It is MOST important for the risk practitioner to:

NO.58 A business unit is updating a risk register with assessment results for a key project. Which of the following is MOST important to capture in the register?