Online Access Free CRISC Practice Test

Which of the following is the BEST key performance indicator (KPI) to measure the effectiveness of an anti- virus program?

• A.Percentage of IT assets with current malware definitions
• B.Number of alerts generated by the anti-virus software
• C.Number of false positives detected over a period of time
• D.Frequency of anti-virus software updates

The PRIMARY reason for periodically monitoring key risk indicators (KRIs) is to:

• A.continually improve risk assessments.
• B.rectify errors in results of KRIs.
• C.reduce costs of risk mitigation controls.
• D.detect changes in the risk profile.

During implementation of an intrusion detection system (IDS) to monitor network traffic, a high number of alerts is reported. The risk practitioner should recommend to:

• A.sniff the traffic using a network analyzer
• B.reset the alert threshold based on peak traffic
• C.analyze the traffic to minimize the false negatives
• D.analyze the alerts to minimize the false positives

Which of the following is the BEST measure of the effectiveness of an employee deprovisioning process?

• A.Number of days taken to remove access after staff separation dates
• B.Number of days taken for IT to remove access after receipt of HR instructions
• C.Number of termination requests processed per reporting period
• D.Number of days taken for HR to provide instructions to IT after staff separation dates

An organization has outsourced a critical process involving highly regulated data to a third party with servers located in a foreign country. Who is accountable for the confidentiality of this data?

• A.Data owner
• B.Third-party data custodian
• C.Regional office executive
• D.Data custodian