Free Access ISACA.CRISC.v2022-05-05.q821 Practice Test (Page 42)

Question 201

Which of the following should be the HIGHEST priority when developing a risk response?

A.The risk response is accounted for in the budget.

B.The risk response aligns with the organization's risk appetite.

C.The risk response is based on a cost-benefit analysis.

D.The risk response addresses the risk with a holistic view.

Question 202

You are the project manager of a project in Bluewell Inc. You and your project team have identified several project risks, completed risk analysis, and are planning to apply most appropriate risk responses. Which of the following tools would you use to choose the appropriate risk response?

A.Project network diagrams

B.Cause-and-effect analysis

C.Decision tree analysis

D.Delphi Technique

E.Explanation:
Decision tree analysis is a risk analysis tool that can help the project manager in determining the best risk response. The tool can be used to measure probability, impact, and risk exposure and how the selected risk response can affect the probability and/or impact of the selected risk event. It helps to form a balanced image of the risks and oppourtunities connected with each possible course of action. This makes them mostly useful for choosing between different strategies, projects, or investment opportunities particularly when the resources are limited. A decision tree is a decision support tool that uses a tree-like graph or model of decisions and their possible consequences, including chance event outcomes, resource costs, and utility.

Question 203

Which of the following is the BEST way to determine the ongoing efficiency of control processes?

A.Review the risk register.

B.Interview process owners.

C.Analyze key performance indicators (KPIs).

D.Perform annual risk assessments.

Question 204

Which of the following BEST reduces the probability of laptop theft?

A.Cable lock

B.Asset tag with GPS

C.Acceptable use policy

D.Data encryption

Question 205

A risk practitioner recently discovered that sensitive data from the production environment is required for testing purposes in non-production environments. Which of the following is the BEST recommendation to address this situation?

A.Mask data before being transferred to the test environment.

B.Implement equivalent security in the test environment.

C.Enable data encryption in the test environment.

D.Prevent the use of production data for test purposes.

Other Version: 3455ISACA.CRISC.v2025-07-19.q999; 6539ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12578ISACA.CRISC.v2022-08-23.q834; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 106OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 172TheSecOpsGroup.CNSP.v2025-09-08.q20; 240CFAInstitute.ESG-Investing.v2025-09-08.q173; 235PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 159Salesforce.Data-Architect.v2025-09-05.q216; 153Adobe.AD0-E605.v2025-09-05.q50

Question 201

Question 202

Question 203

Question 204

Question 205

Download PDF File