Free Access ISACA.CRISC.v2022-05-05.q821 Practice Test (Page 41)

Question 196

Which of the following would qualify as a key performance indicator (KPI)?

A.Number of identified system vulnerabilities

B.Aggregate risk of the organization

C.Number of attacks against the organization's website

D.Number of exception requests processed in the past 90 days

Question 197

Which of the following guidelines should be followed for effective risk management?
Each correct answer represents a complete solution. Choose three.

A.Promote and support consistent performance in risk management

B.Promote fair and open communication

C.Focus on enterprise's objective

D.Balance the costs and benefits of managing risk

Question 198

Which of the following will BEST help in communicating strategic risk priorities?

A.Risk register

B.Balanced Scorecard

C.Business impact analysis (BIA)

D.Heat map

Question 199

A control for mitigating risk in a key business area cannot be implemented immediately. Which of the following is the risk practitioner's BEST course of action when a compensating control needs to be applied?

A.update the risk response plan.

B.Record the risk as accepted m the risk register.

C.Inform senior management.

D.Obtain the risk owner's approval.

Question 200

Your project spans the entire organization. You would like to assess the risk of your project but worried about that some of the managers involved in the project could affect the outcome of any risk identification meeting. Your consideration is based on the fact that some employees would not want to publicly identify risk events that could declare their supervision as poor. You would like a method that would allow participants to anonymously identify risk events. What risk identification method could you use?

A.Delphi technique

B.Root cause analysis

C.Isolated pilot groups

D.SWOT analysis

E.Explanation:
The Delphi technique uses rounds of anonymous surveys to build consensus on project risks. Delphi is a technique to identify potential risk. In this technique, the responses are gathered via aquestionand their inputs are organized according to their contents. The collected responses are sent back to these experts for further input, addition, and comments. The final list of risks in the project is prepared after that. The participants in this technique are anonymous and therefore it helps prevent a person from unduly influencing the others in the group. The Delphi technique helps in reaching the consensus quickly.

Other Version: 3455ISACA.CRISC.v2025-07-19.q999; 6532ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12578ISACA.CRISC.v2022-08-23.q834; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 106OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 172TheSecOpsGroup.CNSP.v2025-09-08.q20; 240CFAInstitute.ESG-Investing.v2025-09-08.q173; 235PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 159Salesforce.Data-Architect.v2025-09-05.q216; 153Adobe.AD0-E605.v2025-09-05.q50

Question 196

Question 197

Question 198

Question 199

Question 200

Download PDF File