Online Access Free CRISC Practice Test

Which of the following would be considered a vulnerability?

• A.Server downtime due to a denial of service (DoS) attack
• B.Authorized administrative access to HR files
• C.Delayed removal of employee access
• D.Corruption of files due to malware

Which of the following is the BEST way to prevent the loss of highly sensitive data when disposing of storage media?

• A.Physical destruction
• B.Data anonymization
• C.Data deletion
• D.Degaussing

Which of the following is the BEST method of creating risk awareness in an organization?

• A.Ensuring senior management commitment to risk training
• B.Appointing the risk manager from the business units
• C.Marking the risk register available to project stakeholders
• D.Providing regular communication to risk managers

Which of the following approaches is MOST effective for the early identification of sophisticated advanced persistent threats (APTs) targeting an enterprise network?

• A.Review information from threat intelligence sources.
• B.Document thorough IT risk scenarios in the risk register.
• C.Conduct frequent internal audits of IT systems.
• D.Define a comprehensive set of key risk indicators (KRIs).

After the implementation of a blockchain solution, a risk practitioner discovers noncompliance with new industry regulations. Which of the following is the MOST important course of actionpriorto informing senior management?

• A.Implement compensating controls.
• B.Evaluate the potential impact.
• C.Evaluate the design effectiveness of existing controls.
• D.Evaluate the industry response to the new regulations.