Free Access ISACA.CRISC.v2022-08-23.q834 Practice Test (Page 56)

Question 271

Henry is the project manager of the QBG Project for his company. This project has a budget of $4,576,900 and is expected to last 18 months to complete. The CIO, a stakeholder in the project, has introduced a scope change request for additional deliverables as part of the project work. What component of the change control system would review the proposed changes' impact on the features and functions of the project's product?

A.Cost change control system

B.Configuration management system

C.Scope change control system

D.Integrated change control

Question 272

Which of the following should be the MAIN consideration when validating an organization's risk appetite?

A.Cost of risk mitigation options.

B.Maturity of the risk culture.

C.Capacity to withstand loss.

D.Comparison against regulations.

Question 273

Which of the following is the way to verify control effectiveness?

A.The capability of providing notification of failure.

B.Whether it is preventive or detective.

C.Its reliability.

D.The test results of intended objectives.

E.Explanation:
Control effectiveness requires a process to verify that the control process worked as intended and
meets the intended control objectives.
Hence the test result of intended objective helps in verifying effectiveness of control.

F.is incorrect. Reliability is not an indication of control strength; weak controls can be
highly reliable, even if they do not meet the control objective.

G.is incorrect. The type of control, like preventive or detective, does not help determine
control effectiveness.

Question 274

Which of the following presents the GREATEST risk to change control in business application development over the complete life cycle?

A.Introduction of requirements that have not been approved

B.Lack of an integrated development environment (IDE) tool

C.Bypassing quality requirements before go-live

D.Emphasis on multiple application testing cycles

Question 275

An organizations chief technology officer (CTO) has decided to accept the risk associated with the potential loss from a denial-of-service (DoS) attack. In this situation, the risk practitioner's BEST course of action is to:

A.update the risk register with the selected risk response

B.recommend that the CTO revisit the risk acceptance decision.

C.identify key risk indicators (KRls) for ongoing monitoring

D.validate the CTO's decision with the business process owner

Other Version: 3466ISACA.CRISC.v2025-07-19.q999; 6551ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 15400ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 104Oracle.1z0-1196-25.v2025-09-12.q18; 103NetworkAppliance.NS0-162.v2025-09-12.q86; 144OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 180TheSecOpsGroup.CNSP.v2025-09-08.q20; 254CFAInstitute.ESG-Investing.v2025-09-08.q173; 240PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 271

Question 272

Question 273

Question 274

Question 275

Download PDF File