Free Access ISACA.CRISC.v2022-05-05.q821 Practice Test (Page 7)

Question 26

You are the project manager of GHT project. You have analyzed the risk and applied appropriate controls. In turn, you got residual risk as a result of this. Residual risk can be used to determine which of the following?

A.Status of enterprise's risk

B.Appropriate controls to be applied next

C.The area that requires more control

D.Whether the benefits of such controls outweigh the costs

E.Explanation:
Residual risk can be used by management to determine:
Which areas require more control Whether the benefits of such controls outweigh the costs
As residual risk is the output that comes after applying appropriate controls, so it can also estimate
the area which need more sophisticated control. If the cost of control is large that its benefits then
no control is applied, hence residual risk can determine benefits of these controls over cost.

F.is incorrect. Appropriate control can only be determined as the result of risk
assessment, not through residual risk.

Question 27

There are four inputs to the Monitoring and Controlling Project Risks process. Which one of the following will NOT help you, the project manager, to prepare for risk monitoring and controlling?

A.Risk register

B.Work Performance Information

C.Project management plan

D.Change requests

Question 28

Which of the following is the BEST course of action to reduce risk impact?

A.Create an IT security policy

B.Implement detective controls

C.Implement corrective measures

D.Leverage existing technology

Question 29

Which of the following BEST provides an early warning that network access of terminated employees is not being revoked in accordance with the service level agreement (SLA)?

A.Revising the service level agreement (SLA)

B.Monitoring key access control performance indicators

C.Analyzing access control logs for suspicious activity

D.Updating multi-factor authentication

Question 30

To implement the MOST effective monitoring of key risk indicators (KRIs), which of the following needs to be in place?

A.Controls monitoring

B.Escalation procedures

C.Automated data feed

D.Threshold definition

Other Version: 3320ISACA.CRISC.v2025-07-19.q999; 6458ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12541ISACA.CRISC.v2022-08-23.q834; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 160TheSecOpsGroup.CNSP.v2025-09-08.q20; 217CFAInstitute.ESG-Investing.v2025-09-08.q173; 155PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 145Salesforce.Data-Architect.v2025-09-05.q216; 139Adobe.AD0-E605.v2025-09-05.q50; 183Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 26

Question 27

Question 28

Question 29

Question 30

Download PDF File