Free Access ISACA.CRISC.v2022-08-23.q834 Practice Test (Page 50)

Question 241

Which of the following is BEST described by the definition below?
"They are heavy influencers of the likelihood and impact of risk scenarios and should be taken into account during every risk analysis, when likelihood and impact are assessed."

A.Obscure risk

B.Risk factors

C.Risk analysis

D.Risk event

E.Explanation:
Risk factors are those features that influence the likelihood and/or business impact of risk
scenarios. They have heavy influences on probability and impact of risk scenarios. They should be
taken into account during every risk analysis, when likelihood and impact are assessed.

F.is incorrect. A risk analysis involves identifying the most probable threats to an
organization and analyzing the related vulnerabilities of the organization to these threats. A risk
from an organizational perspective consists of:
Threats to various processes of organization.
Threats to physical and information assets.
Likelihood and frequency of occurrence from threat.
Impact on assets from threat and vulnerability.
Risk analysis allows the auditor to do the following tasks:
Identify threats and vulnerabilities to the enterprise and its information system.
Provide information for evaluation of controls in audit planning.
Aids in determining audit objectives.
Supporting decision based on risks.

G.is incorrect. The enterprise must consider risk that has not yet occurred and should
develop scenarios around unlikely, obscure or non-historical events.
Such scenarios can be developed by considering two things:
Visibility
Recognition
For the fulfillment of this task enterprise must:
Be in a position that it can observe anything going wrong
Have the capability to recognize an observed event as something wrong

Question 242

While developing obscure risk scenarios, what are the requirements of the enterprise?
Each correct answer represents a part of the solution. Choose two.

A.Have capability to cure the risk events

B.Have capability to recognize an observed event as something wrong

C.Have sufficient number of analyst

D.Be in a position that it can observe anything going wrong

E.Explanation:
The enterprise must consider risk that has not yet occurred and should develop scenarios around unlikely, obscure or non-historical events. Such scenarios can be developed by considering two things: Visibility Recognition For the fulfillment of this task enterprise must: Be in a position that it can observe anything going wrong Have the capability to recognize an observed event as something wrong

Question 243

Which of the following issues should be of GREATEST concern when evaluating existing controls during a risk assessment?

A.Redundant compensating controls are in place.

B.Successive assessments have the same recurring vulnerabilities.

C.Asset custodians are responsible for defining controls instead of asset owners.

D.A high number of approved exceptions exist with compensating controls.

Question 244

Which of the following are the security plans adopted by the organization?
Each correct answer represents a complete solution. (Choose three.)

A.Business continuity plan

B.Backup plan

C.Disaster recovery plan

D.Project management plan

Question 245

The BEST criteria when selecting a risk response is the:

A.effectiveness of risk response options

B.importance of IT risk within the enterprise

C.capability to implement the response

D.alignment of response to industry standards

Other Version: 3445ISACA.CRISC.v2025-07-19.q999; 6531ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 15382ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 106OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 172TheSecOpsGroup.CNSP.v2025-09-08.q20; 239CFAInstitute.ESG-Investing.v2025-09-08.q173; 234PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 157Salesforce.Data-Architect.v2025-09-05.q216; 152Adobe.AD0-E605.v2025-09-05.q50

Question 241

Question 242

Question 243

Question 244

Question 245

Download PDF File