Free Access ISACA.CRISC.v2022-05-05.q821 Practice Test (Page 9)

Question 36

A risk practitioner has observed that risk owners have approved a high number of exceptions to the information security policy. Which of the following should be the risk practitioner's GREATEST concern?

A.Aggregate risk approaching the tolerance threshold

B.Vulnerabilities are not being mitigated

C.Security policies are not being reviewed periodically

D.Risk owners are focusing more on efficiency

Question 37

Which of the following events refer to loss of integrity?
Each correct answer represents a complete solution. Choose three.

A.Someone sees company's secret formula

B.Someone makes unauthorized changes to a Web site

C.An e-mail message is modified in transit

D.A virus infects a file

Question 38

Assessing the probability and consequences of identified risks to the project objectives, assigning a risk score to each risk, and creating a list of prioritized risks describes which of the following processes?

A.Qualitative Risk Analysis

B.Plan Risk Management

C.Identify Risks

D.Quantitative Risk Analysis

E.Explanation:
The purpose of qualitative risk analysis is to determine what impact the identified risk events will have on the project and the probability they'll occur. It also puts risks in priority order according to their effects on the project objectives and assigns a risk score for the project.

F.is incorrect. This process does not involve assessing the probability and consequences of identified risks. Quantitative analysis is the use of numerical and statistical techniques rather than the analysis of verbal material for analyzing risks. Some of the quantitative methods of risk analysis are: Internal loss method External data analysis Business process modeling (BPM) and simulation Statistical process control (SPC) Answer:C is incorrect. It involves listing of all the possible risks so as to cure them before it can occur. In risk identification both threats and opportunities are considered, as both carry some level
of risk with them.

Question 39

Which of the following is MOST helpful in preventing risk events from materializing?

A.Establishing key risk indicators (KRIs)

B.Maintaining the risk register

C.Reviewing and analyzing security incidents

D.Prioritizing and tracking issues

Question 40

What are the steps that are involved in articulating risks? Each correct answer represents a complete solution. Choose three.

A.Identify business opportunities.

B.Identify the response

C.Communicate risk analysis results and report risk management activities and the state of compliance.

D.Interpret independent risk assessment findings.

Other Version: 3320ISACA.CRISC.v2025-07-19.q999; 6458ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12541ISACA.CRISC.v2022-08-23.q834; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 160TheSecOpsGroup.CNSP.v2025-09-08.q20; 217CFAInstitute.ESG-Investing.v2025-09-08.q173; 155PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 145Salesforce.Data-Architect.v2025-09-05.q216; 139Adobe.AD0-E605.v2025-09-05.q50; 183Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 36

Question 37

Question 38

Question 39

Question 40

Download PDF File