Free Access ISACA.CRISC.v2022-08-23.q834 Practice Test (Page 10)

Question 41

Harry is the project manager of HDW project. He has identified a risk that could injure project team members.
He does not want to accept any risk where someone could become injured on this project so he hires a professional vendor to complete this portion of the project work. What type of risk response is Harry implementing?

A.Transference

B.Mitigation

C.Acceptance

D.Avoidance

Question 42

A global company s business continuity plan (BCP) requires the transfer of its customer information....
event of a disaster. Which of the following should be the MOST important risk consideration?

A.The cloud computing environment is shared with another company

B.The lack of a service level agreement (SLA) in the vendor contract

C.The difference In the management practices between each company

D.The organizational culture differences between each country

Question 43

A risk owner has identified a risk with high impact and very low likelihood. The potential loss is covered by insurance. Which of the following should the risk practitioner do NEXT?

A.Validate the risk response with internal audit.

B.Recommend avoiding the risk.

C.Evaluate outsourcing the process.

D.Update the risk register.

Question 44

Numerous media reports indicate a recently discovered technical vulnerability is being actively exploited. Which of the following would be the BEST response to this scenario?

A.Reassess the inherent risk of the target.

B.Assess the vulnerability management process.

C.Conduct a vulnerability assessment.

D.Conduct a control serf-assessment.

Question 45

You work as the project manager for Bluewell Inc. Your project has several risks that will affect several stakeholder requirements. Which project management plan will define who will be available to share information on the project risks?

A.Resource Management Plan

B.Risk Management Plan

C.Stakeholder management strategy

D.Communications Management Plan

E.Explanation:
The Communications Management Plan defines, in regard to risk management, who will be available to share information on risks and responses throughout the project. The Communications Management Plan aims to define the communication necessities for the project and how the information will be circulated. The Communications Management Plan sets
the communication structure for the project. This structure provides guidance forcommunication
throughout the project's life and is updated as communication needs change. The Communication
Managements Plan identifies and defines the roles of persons concerned with the project. It
includes a matrix known as the communication matrix to map the communication requirements of
the project.

F.is incorrect. The stakeholder management strategy does not address risk
communications.

G.is incorrect. The Risk Management Plan defines risk identification, analysis, response,
and monitoring.

Other Version: 3303ISACA.CRISC.v2025-07-19.q999; 6447ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 15298ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 106Oracle.1Z0-1057-23.v2025-09-10.q47; 146Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 148TheSecOpsGroup.CNSP.v2025-09-08.q20; 200CFAInstitute.ESG-Investing.v2025-09-08.q173; 150PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 139Salesforce.Data-Architect.v2025-09-05.q216; 135Adobe.AD0-E605.v2025-09-05.q50; 173Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 41

Question 42

Question 43

Question 44

Question 45

Download PDF File