Free Access ISACA.CRISC.v2022-08-23.q834 Practice Test (Page 36)

Question 171

Performing a background check on a new employee candidate before hiring is an example of what type of control?

A.Compensating

B.Preventive

C.Detective

D.Corrective

Question 172

Which of the following statements in an organization's current risk profile report is cause for further action by senior management?

A.Key risk indicators (KRIs) are lagging.

B.Key performance indicator (KPI) trend data is incomplete.

C.Key performance indicators (KPIs) are outside of targets.

D.New key risk indicators (KRIs) have been established.

Question 173

Which of the following BEST ensures that a firewall is configured in compliance with an enterprise's security policy?

A.Interview the firewall administrator.

B.Review the actual procedures.

C.Review the device's log file for recent attacks.

D.Review the parameter settings.

Question 174

Which of the following scenarios presents the GREATEST risk for a global organization when implementing a data classification policy?

A.Changes to information handling procedures are not documented.

B.There are many data assets across the organization that need to be classified.

C.Changes to data sensitivity during the data life cycle have not been considered.

D.Data encryption has not been applied to all sensitive data across the organization.

Question 175

An organization has experienced several incidents of extended network outages that have exceeded tolerance.
Which of the following should be the risk practitioner's FIRST step to address this situation?

A.Recommend a root cause analysis of the incidents

B.Update the risk tolerance level to acceptable thresholds

C.Recommend additional controls to address the risk

D.Update the incident-related risk trend in the risk register

Other Version: 3388ISACA.CRISC.v2025-07-19.q999; 6501ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 15352ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 119Oracle.1Z0-1057-23.v2025-09-10.q47; 153Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 166TheSecOpsGroup.CNSP.v2025-09-08.q20; 229CFAInstitute.ESG-Investing.v2025-09-08.q173; 176PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 152Salesforce.Data-Architect.v2025-09-05.q216; 148Adobe.AD0-E605.v2025-09-05.q50

Question 171

Question 172

Question 173

Question 174

Question 175

Download PDF File