Free Access ISACA.CRISC.v2022-08-23.q834 Practice Test (Page 5)

Question 16

You are the project manager of GHT project. Your project team is in the process of identifying project risks on your current project. The team has the option to use all of the following tools and techniques to diagram some of these potential risks EXCEPT for which one?

A.Process flowchart

B.Ishikawa diagram

C.Influence diagram

D.Decision tree diagram

Question 17

Which of the following aspect of monitoring tool ensures that the monitoring tool has the ability to keep up with the growth of an enterprise?

A.Scalability

B.Customizability

C.Sustainability

D.Impact on performance

E.Explanation:
Monitoring tools have to be able to keep up with the growth of an enterprise and meet anticipated growth in process, complexity or transaction volumes; this is ensured by the scalability criteria of the monitoring tool.

Question 18

IT stakeholders have asked a risk practitioner for IT risk profile reports associated with specific departments to allocate resources for risk mitigation. The BEST way to address this request would be to use:

A.the cost associated with each control.

B.historical risk assessments.

C.information from the risk register.

D.key risk indicators (KRls).

Question 19

Which of the following statements BEST describes policy?

A.A minimum threshold of information security controls that must be implemented

B.A checklist of steps that must be completed to ensure information security

C.An overall statement of information security scope and direction

D.A technology-dependent statement of best practices

E.Explanation:
A policy is an executive mandate which helps in identifying a topic that contains particular risks to avoid or prevent. Policies are high-level documents signed by a person of high authority with the power to force cooperation. The policy is a simple document stating that a particular high-level control objective is important to the organization's success. Policies are usually only one page in length. The authority of the person mandating a policy will determine the scope of implementation. Hence in other words, policy is an overall statement of information security scope and direction.

Question 20

The PRIMARY reason for periodically monitoring key risk indicators (KRIs) is to:

A.continually improve risk assessments.

B.detect changes in the risk profile.

C.reduce costs of risk mitigation controls

D.rectify errors in results of KRIs.

Other Version: 3304ISACA.CRISC.v2025-07-19.q999; 6447ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 15298ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 107Oracle.1Z0-1057-23.v2025-09-10.q47; 146Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 153TheSecOpsGroup.CNSP.v2025-09-08.q20; 204CFAInstitute.ESG-Investing.v2025-09-08.q173; 151PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 139Salesforce.Data-Architect.v2025-09-05.q216; 136Adobe.AD0-E605.v2025-09-05.q50; 173Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 16

Question 17

Question 18

Question 19

Question 20

Download PDF File