Online Access Free CRISC Practice Test

Which of the following would be MOST helpful to an information security management team when allocating resources to mitigate exposures?

• A.Risk assessment results
• B.Internal audit findings
• C.Relevant risk case studies
• D.Penetration testing results

A business unit is updating a risk register with assessment results for a key project. Which of the following is MOST important to capture in the register?

• A.Action plans to address risk scenarios requiring treatment
• B.The team that performed the risk assessment
• C.An assigned risk manager to provide oversight
• D.The methodology used to perform the risk assessment

Which of the following is the PRIMARY benefit of stakeholder involvement in risk scenario development?

• A.Awareness of emerging business threats
• B.Up-to-date knowledge on risk responses
• C.Ability to determine business impact
• D.Decision-making authority for risk treatment

During implementation of an intrusion detection system (IDS) to monitor network traffic, a high number of alerts is reported. The risk practitioner should recommend to:

• A.analyze the traffic to minimize the false negatives
• B.analyze the alerts to minimize the false positives
• C.reset the alert threshold based on peak traffic
• D.sniff the traffic using a network analyzer

Which of the following should a risk practitioner recommend FIRST when an increasing trend of risk events and subsequent losses has been identified?

• A.Conduct root cause analyses for risk events.
• B.Integrate the risk event and incident management processes.
• C.Educate personnel on risk mitigation strategies.
• D.Implement controls to prevent future risk events.