Free Access ISACA.CRISC.v2022-10-10.q527 Practice Test (Page 8)

Question 31

Which of the following is the BEST approach to use when creating a comprehensive set of IT risk scenarios?

A.Gather scenarios from senior management

B.Derive scenarios from IT risk policies and standards

C.Benchmark scenarios against industry peers

D.Map scenarios to a recognized risk management framework

Question 32

Which section of the Sarbanes-Oxley Act specifies "Periodic financial reports must be certified by CEO and CFO"?

A.Section 302

B.Section 404

C.Section 203

D.Section 409

Question 33

Which of the following parameters are considered for the selection of risk indicators?
Each correct answer represents a part of the solution. Choose three.

A.Size and complexity of the enterprise

B.Type of market in which the enterprise operates

C.Risk appetite and risk tolerance

D.Strategy focus of the enterprise

E.Explanation:
Risk indicators are placed at control points within the enterprise and are used to collect data. These collected data are used to measure the risk levels at that point. They also track events or incidents that may indicate a potentially harmful situation. Risk indicators can be in form of logs, alarms and reports. Risk indicators are selected depending on a number of parameters in the internal and external environment, such as: Size and complexity of the enterprise Type of market in which the enterprise operates Strategy focus of the enterprise

Question 34

You are the project manager of the GHT project. This project will last for 18 months and has a project budget of $567,000. Robert, one of your stakeholders, has introduced a scope change request that will likely have an impact on the project costs and schedule. Robert assures you that he will pay for the extra time and costs associated with the risk event. You have identified that change request may also affect other areas of the project other than just time and cost. What project management component is responsible for evaluating a change request and its impact on all of the project management knowledge areas?

A.Configuration management

B.Integrated change control

C.Risk analysis

D.Project change control system

Question 35

Who should be accountable for ensuring effective cybersecurity controls are established?

A.Security management function

B.Enterprise risk function

C.Risk owner

D.IT management

Other Version: 12237ISACA.CRISC.v2025-07-19.q999; 13880ISACA.CRISC.v2024-09-11.q999; 15413ISACA.CRISC.v2022-08-23.q834; 19243ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 249APICS.CSCP.v2026-09-13.q612; 164ISACA.AAISM.v2026-09-13.q256; 141Adobe.AD0-E911.v2026-09-12.q35; 128Google.ADP.v2026-09-11.q22; 147AIChE.CCPSC.v2026-09-11.q41; 134Scrum.PSPO-III.v2026-09-10.q23; 229Scrum.PSPO-I.v2026-09-09.q157; 195ScaledAgile.SAFe-SPC.v2026-09-08.q108; 152Oracle.1Z0-1033-26.v2026-09-08.q43; 257Pegasystems.PEGACPSSA25V1.v2026-09-08.q144

Question 31

Question 32

Question 33

Question 34

Question 35

Download PDF File