Section: Volume B
Explanation:
Reasonableness tests make certain assumptions about the information as the basis for more elaborate data validation tests.
Incorrect Answers:
A: The duplicate test does not identify duplicate transactions; rather it identifies and confirms the validity of duplicates.
B: The control total test does not ensure that all transactions have been extracted, but only ensures that the data are complete.
C: As compared to simplistic, the reasonableness test is a valid foundation for more elaborate data validation tests.

Explanation/Reference:
Explanation:
Risk aware decision, analyzing risk, and articulating risk are the responsibilities of Enterprise risk committee. They are the executives who are accountable for the enterprise level collaboration and consensus required to support enterprise risk management (ERM) activities and decisions. An IT risk council may be established to consider IT risk in more detail and advise the enterprise risk committee.
ERC ensure that these activities are completed successfully.
Incorrect Answers:
A: ERM is not responsible for reaction over risk events. Business process owners are accounted for this task.

Section: Volume A
Explanation:
Risk rating rules define how to prioritize risks after the related probability and impact values are calculated.
These are generally included in the organizational process assets and are refined for individual projects.
Incorrect Answers:
A: Affinity Diagram is a method of group creativity technique to collect requirements which allows large numbers of ideas to be sorted into groups for review and analysis. This is generally used in Scope Management and not applicable to this option.
C: A Project Network diagram shows the sequencing and linkage between various project tasks and is not applicable to this question D: Risk categories are an output of the Perform Qualitative Risk Analysis process and not a tool to complete the process.

is incorrect. Risk transfer/sharing means reducing either risk frequency or impact by transferring or otherwise sharing a portion of the risk. Common techniques include insurance and outsourcing. These techniques do not relieve an enterprise of a risk, but can involve the skills of another party in managing the risk and reducing the financial consequence if an adverse event occurs. Answer: B is incorrect. Risk treatment means that action is taken to reduce the frequency and impact of a risk. Answer: C is incorrect. Acceptance means that no action is taken relative to a particular risk, and loss is accepted when/if it occurs. This is different from being ignorant of risk; accepting risk assumes that the risk is known, i.e., an informed decision has been made by management to accept it as such.