Free Access ISACA.CRISC.v2022-05-05.q821 Practice Test (Page 79)

Question 386

A risk assessment has identified that an organization may not be in compliance with industry regulations. The BEST course of action would be to:

A.collaborate with management to meet compliance requirements

B.conduct a gap analysis against compliance criteria

C.identify necessary controls to ensure compliance

D.modify internal assurance activities to include control validation

Question 387

Which of the following facilitates a completely independent review of test results for evaluating control effectiveness?

A.Segregation of duties

B.Compliance review

C.Three lines of defense

D.Quality assurance review

Question 388

Which of the following should be an element of the risk appetite of an organization?

A.The residual risk affected by preventive controls

B.The enterprise's capacity to absorb loss

C.The amount of inherent risk considered appropriate

D.The effectiveness of compensating controls

Question 389

Which of the following BEST indicates the effectiveness of anti-malware software?

A.Number of staff hours lost due to malware attacks.

B.Number of patches made to anti-malware software.

C.Number of successful attacks by malicious software.

D.Number of downtime hours in business critical servers.

Question 390

John is the project manager of the NHQ Project for his company. His project has 75 stakeholders, some of which are external to the organization. John needs to make certain that he communicates about risk in the most appropriate method for the external stakeholders. Which project management plan will be the best guide for John to communicate to the external stakeholders?

A.Risk Response Plan

B.Communications Management Plan

C.Project Management Plan

D.Risk Management Plan

Other Version: 3541ISACA.CRISC.v2025-07-19.q999; 6598ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12586ISACA.CRISC.v2022-08-23.q834; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 111Oracle.1z0-1196-25.v2025-09-12.q18; 110NetworkAppliance.NS0-162.v2025-09-12.q86; 151OCEG.GRCP.v2025-09-11.q211; 111HP.HPE0-V27.v2025-09-11.q78; 126Oracle.1Z0-1057-23.v2025-09-10.q47; 169Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 141SAP.C-S4EWM-2023.v2025-09-08.q83; 186TheSecOpsGroup.CNSP.v2025-09-08.q20; 283CFAInstitute.ESG-Investing.v2025-09-08.q173; 280PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 386

Question 387

Question 388

Question 389

Question 390

Download PDF File