Free Access ISACA.CRISC.v2022-05-05.q821 Practice Test (Page 27)

Question 126

Implementing which of the following will BEST help ensure that systems comply with an established baseline before deployment?

A.Continuous monitoring and alerting

B.Access controls and active logging

C.Configuration management

D.Vulnerability scanning

Question 127

The risk associated with an asset before controls are applied can be expressed as:

A.the likelihood of a given threat

B.the magnitude of an impact

C.a function of the cost and effectiveness of control.

D.a function of the likelihood and impact

Question 128

Which of the following is the MOST important objective of establishing an enterprise risk management (ERM) function within an organization?

A.To ensure risk profiles are presented in a consistent format within the organization

B.To optimize risk management resources across the organization

C.To have a standard risk management process for complying with regulations

D.To have a unified approach to risk management across the organization

Question 129

Which of the following is MOST important when developing key performance indicators (KPIs)?

A.Alignment to management reports

B.Alignment to risk responses

C.Alerts when risk thresholds are reached

D.Identification of trends

Question 130

Billy is the project manager of the HAR Project and is in month six of the project. The project is scheduled to last for 18 months.
Management asks Billy how often the project team is participating in risk reassessment in this project. What should Billy tell management if he's following the best practices for risk management?

A.Project risk management has been concluded with the project planning.

B.Project risk management happens at every milestone.

C.Project risk management is scheduled for every month in the 18-month project.

D.At every status meeting the project team project risk management is an agenda item.

E.Explanation:
Risk management is an ongoing project activity. It should be an agenda item at every project
status meeting.

F.is incorrect. Milestones are good times to do reviews, but risk management should
happen frequently.

G.is incorrect. This answer would only be correct if the project has a status meeting just
once per month in the project.

Other Version: 3400ISACA.CRISC.v2025-07-19.q999; 6510ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12566ISACA.CRISC.v2022-08-23.q834; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 105HP.HPE0-V27.v2025-09-11.q78; 119Oracle.1Z0-1057-23.v2025-09-10.q47; 153Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 133SAP.C-S4EWM-2023.v2025-09-08.q83; 167TheSecOpsGroup.CNSP.v2025-09-08.q20; 232CFAInstitute.ESG-Investing.v2025-09-08.q173; 214PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 154Salesforce.Data-Architect.v2025-09-05.q216; 148Adobe.AD0-E605.v2025-09-05.q50

Question 126

Question 127

Question 128

Question 129

Question 130

Download PDF File