Free Access ISACA.CRISC.v2022-05-05.q821 Practice Test (Page 61)

Question 296

Judy has identified a risk event in her project that will have a high probability and a high impact. Based on the requirements of the project, Judy has asked to change the project scope to remove the associated requirement and the associated risk. What type of risk response is this?

A.Exploit

B.Not a risk response, but a change request

C.Avoidance

D.Transference

E.Explanation:
Risk avoidance involves changing the project management plan to eliminate the threat entirely. The project manager may also isolate the project objectives from the risk's impact or change the objective that is in jeopardy. Examples of this include extending the schedule, changing the strategy, or reducing the scope. The most radical avoidance strategy is to shut down the project entirely. Some risks that arise early in the project can be avoided by clarifying requirements, obtaining information, improving communication, or acquiring expertise.

Question 297

Which of the following is the BEST method to identify unnecessary controls?

A.Evaluating existing controls against audit requirements

B.Reviewing system functionalities associated with business processes

C.Monitoring existing key risk indicators (KRIs)

D.Evaluating the impact of removing existing controls

Question 298

Which of the following should be the PRIMARY input when designing IT controls?

A.Benchmark of industry standards

B.Outcome of control self-assessments

C.Internal and external risk reports

D.Recommendations from IT risk experts

Question 299

After a high-profile systems breach at an organization s key vendor, the vendor has implemented additional mitigating controls. The vendor has voluntarily shared the following set of assessments:
Which of the assessments provides the MOST reliable input to evaluate residual risk in the vendor's control environment?

A.Regulatory examination

B.Vendor performance scorecard

C.Internal audit

D.External audit

Question 300

The compensating control that MOST effectively addresses the risk associated with piggybacking into a restricted area without a dead-man door is:

A.using two-factor authentication

B.using biometric door locks

C.requiring employees to wear ID badges

D.security awareness training

Premium Bundle

Newest CRISC Exam PDF Dumps shared by BraindumpsPass.com for Helping Passing CRISC Exam! BraindumpsPass.com now offer the updated CRISC exam dumps, the BraindumpsPass.com CRISC exam questions have been updated and answers have been corrected get the latest BraindumpsPass.com CRISC pdf dumps with Exam Engine here:

Access CRISC Premium Version

(1745 Q&As Dumps, 40%OFF Special Discount: Exam-Tests)

Other Version: 3513ISACA.CRISC.v2025-07-19.q999; 6582ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12586ISACA.CRISC.v2022-08-23.q834; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 108Oracle.1z0-1196-25.v2025-09-12.q18; 109NetworkAppliance.NS0-162.v2025-09-12.q86; 150OCEG.GRCP.v2025-09-11.q211; 110HP.HPE0-V27.v2025-09-11.q78; 125Oracle.1Z0-1057-23.v2025-09-10.q47; 167Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 140SAP.C-S4EWM-2023.v2025-09-08.q83; 184TheSecOpsGroup.CNSP.v2025-09-08.q20; 278CFAInstitute.ESG-Investing.v2025-09-08.q173; 261PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132