Free Access ISACA.CRISC.v2022-05-05.q821 Practice Test (Page 119)

Question 586

Which of the following is MOST important to compare against the corporate risk profile?

A.Industry benchmarks

B.Regulatory compliance

C.Risk tolerance

D.Risk appetite

Question 587

Prudent business practice requires that risk appetite not exceed:

A.inherent risk.

B.risk tolerance.

C.residual risk.

D.risk capacity.

Question 588

Which of the following elements of a risk register is MOST likely to change as a result of change in management's risk appetite?

A.Risk likelihood and impact

B.Risk velocity

C.Inherent risk

D.Key risk indicator (KRI) thresholds

Question 589

Which of the following come under the management class of controls?
Each correct answer represents a complete solution. Choose all that apply.

A.Risk assessment control

B.Audit and accountability control

C.Program management control

D.Identification and authentication control

E.Explanation:
The Management class of controls includes five families. These families include over 40 individual controls. Following is a list of each of the families in the Management class: Certification, Accreditation, and Security Assessment (CA): This family of controls addresses steps to implement a security and assessment program. It includes controls to ensure only authorized systems are allowed on a network. It includes details on important security concepts, such as continuous monitoring and a plan of action and milestones. Planning (PL): The PL family focuses on security plans for systems. It also covers Rules of Behaviour for users. Rules of Behaviour are also called an acceptable use policy. Risk Assessment (RA): This family of controls provides details on risk assessments and vulnerability scanning. System and Services Acquisition (SA): The SA family includes any controls related to the purchase of products and services. It also includes controls related to software usage and user installed software. Program Management (PM): This family is driven by the Federal Information Security Management Act (FISMA). It provides controls to ensure compliance with FISMA. These controls complement other controls. They don't replace them.

Question 590

Which of the following items is considered as an objective of the three dimensional model within the framework described in COSO ERM?

A.Risk assessment

B.Financial reporting

C.Control environment

D.Monitoring

Other Version: 3466ISACA.CRISC.v2025-07-19.q999; 6549ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12581ISACA.CRISC.v2022-08-23.q834; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 103Oracle.1z0-1196-25.v2025-09-12.q18; 103NetworkAppliance.NS0-162.v2025-09-12.q86; 144OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 180TheSecOpsGroup.CNSP.v2025-09-08.q20; 254CFAInstitute.ESG-Investing.v2025-09-08.q173; 238PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 586

Question 587

Question 588

Question 589

Question 590

Download PDF File