Free Access ISACA.CRISC.v2022-08-23.q834 Practice Test (Page 34)

Question 161

What are the responsibilities of the CRO?
Each correct answer represents a complete solution. Choose three.

A.Managing the risk assessment process

B.Implement corrective actions

C.Advising Board of Directors

D.Managing the supporting risk management function

Question 162

Which of the following is the MOST useful indicator to measure the efficiency of an identity and access management process?

A.Average time to provision user accounts

B.Password reset volume per month

C.Number of tickers for provisioning new accounts

D.Average account lockout time

Question 163

A risk practitioner notices a risk scenario associated with data loss at the organization's cloud provider is assigned to the provider. Who should the risk scenario be reassigned to?

A.Chief risk officer

B.Vendor manager

C.Data owner

D.Senior management

Question 164

What is the GREATEST concern with maintaining decentralized risk registers instead of a consolidated risk register?

A.Aggregated risk may exceed the enterprise's risk appetite and tolerance.

B.Duplicate resources may be used to manage risk registers.

C.Standardization of risk management practices may be difficult to enforce.

D.Risk analysis may be inconsistent due to non-uniform impact and likelihood scales.

Question 165

You are the project manager of GHT project. You have initiated the project and conducted the feasibility study. What result would you get after conducting feasibility study?
Each correct answer represents a complete solution. Choose all that apply.

A.Recommend alternatives and course of action

B.Risk response plan

C.Project management plan

D.Results of criteria analyzed, like costs, benefits, risk, resources required and organizational impact

E.Explanation:
The completed feasibility study results should include a cost/benefit analysis report that: Provides the results of criteria analyzed (e.g., costs, benefits, risk, resources required and organizational impact) Recommends one of the alternatives and a course of action

Other Version: 3370ISACA.CRISC.v2025-07-19.q999; 6489ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 15338ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 151Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 165TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 173PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 151Salesforce.Data-Architect.v2025-09-05.q216; 147Adobe.AD0-E605.v2025-09-05.q50

Question 161

Question 162

Question 163

Question 164

Question 165

Download PDF File