Free Access ISACA.CRISC.v2022-08-23.q834 Practice Test (Page 40)

Question 191

Which of the following is the GREATEST advantage of implementing a risk management program?

A.Reducing residual risk

B.Improving security governance

C.Enabling risk-aware decisions

D.Promoting a risk-aware culture

Question 192

When defining thresholds for control key performance indicators (KPIs), it is MOST helpful to align:

A.key risk indicators (KRIs) with risk appetite of the business

B.the control key performance indicators (KPIs) with audit findings

C.control performance with risk tolerance of business owners

D.information risk assessments with enterprise risk assessments

Question 193

An organization has decided to outsource a web application, and customer data will be stored in the vendor's public cloud. To protect customer data, it is MOST important to ensure which of the following?

A.The organization's incident response procedures have been updated.

B.The vendor's responsibilities are defined in the contract.

C.Administrative access is only held by the vendor.

D.The vendor stores the data in the same jurisdiction.

Question 194

You are the project manager of the NHH Project. You are working with the project team to create a plan to document the procedures to manage risks throughout the project. This document will define how risks will be identified and quantified. It will also define how contingency plans will be implemented by the project team. What document do you and your team is creating in this scenario?

A.Project plan

B.Resource management plan

C.Project management plan

D.Risk management plan

E.Explanation:
The risk management plan, part of the comprehensive management plan, defines how risks will be identified, analyzed, monitored and controlled, and even responded to. A Risk management plan is a document arranged by a project manager to estimate the effectiveness, predict risks, and build response plans to mitigate them. It also consists of the risk assessment matrix. Risks are built in with any project, and project managers evaluate risks repeatedly and build plans to address them. The risk management plan consists of analysis of possible risks with both high and low impacts, and the mitigation strategies to facilitate the project and avoid being derailed through which the common problems arise. Risk management plans should be timely reviewed by the project team in order to avoid having the analysis become stale and not reflective of actual potential project risks. Most critically, risk management plans include a risk strategy for project execution.

Question 195

An organization has procured a managed hosting service and just discovered the location is likely to be flooded every 20 years. Of the following, who should be notified of this new information FIRST?

A.The risk owner who also owns the business service enabled by this infrastructure

B.The site manager who is required to provide annual risk assessments under the contract

C.The data center manager who is also employed under the managed hosting services contract

D.The chief information officer (CIO) who is responsible for the hosted services

Other Version: 3403ISACA.CRISC.v2025-07-19.q999; 6510ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 15360ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 105HP.HPE0-V27.v2025-09-11.q78; 119Oracle.1Z0-1057-23.v2025-09-10.q47; 153Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 135SAP.C-S4EWM-2023.v2025-09-08.q83; 168TheSecOpsGroup.CNSP.v2025-09-08.q20; 235CFAInstitute.ESG-Investing.v2025-09-08.q173; 216PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 154Salesforce.Data-Architect.v2025-09-05.q216; 148Adobe.AD0-E605.v2025-09-05.q50

Question 191

Question 192

Question 193

Question 194

Question 195

Download PDF File