Free Access ISACA.CRISC.v2022-08-23.q834 Practice Test (Page 43)

Question 206

Which of the following elements of a risk register is MOST likely to change as a result of change in management's risk appetite?

A.Risk likelihood and impact

B.Risk velocity

C.Inherent risk

D.Key risk indicator (KRI) thresholds

Question 207

Which of the following should be an element of the risk appetite of an organization?

A.The residual risk affected by preventive controls

B.The amount of inherent risk considered appropriate

C.The enterprise's capacity to absorb loss

D.The effectiveness of compensating controls

Question 208

A company has located its computer center on a moderate earthquake fault. Which of the following is the MOST important consideration when establishing a contingency plan and an alternate processing site?

A.The alternative site is a hot site with equipment ready to resume processing immediately.

B.The contingency plan provides for backup media to be taken to the alternative site.

C.The contingency plan for high priority applications does not involve a shared cold site.

D.The alternative site does not reside on the same fault to matter how the distance apart.

Question 209

Which of the following attributes of a key risk indicator (KRI) is MOST important?

A.Repeatable

B.Qualitative

C.Automated

D.Quantitative

Question 210

The PRIMARY objective for requiring an independent review of an organization's IT risk management process should be to:

A.verify implemented controls to reduce the likelihood of threat materialization.

B.ensure IT risk management is focused on mitigating potential risk.

C.assess gaps in IT risk management operations and strategic focus.

D.confirm that IT risk assessment results are expressed as business impact.

Other Version: 3425ISACA.CRISC.v2025-07-19.q999; 6521ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 15365ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 106OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 121Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 171TheSecOpsGroup.CNSP.v2025-09-08.q20; 238CFAInstitute.ESG-Investing.v2025-09-08.q173; 225PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 156Salesforce.Data-Architect.v2025-09-05.q216; 150Adobe.AD0-E605.v2025-09-05.q50

Question 206

Question 207

Question 208

Question 209

Question 210

Download PDF File