Free Access ISACA.CRISC.v2024-09-11.q999 Practice Test (Page 140)

Question 691

In which of the following risk management capability maturity levels risk appetite and tolerance are applied only during episodic risk assessments?

A.Level 3

B.Level 2

C.Level 4

D.Level 1

E.Explanation:
An enterprise's risk management capability maturity level is 1 when:
There is an understanding that risk is important and needs to be managed, but it is viewed as a
technical issue and the business primarily considers the downside of IT risk.
Any risk identification criteria vary widely across the enterprise.
Risk appetite and tolerance are applied only during episodic risk assessments.
Enterprise risk policies and standards are incomplete and/or reflect only external requirements and
lack defensible rationale and enforcement mechanisms.
Risk management skills exist on an ad hoc basis, but are not actively developed.
Ad hoc inventories of controls that are unrelated to risk are dispersed across desktop applications.

F.is incorrect. In level 3 of risk management capability maturity model, local tolerances
drive the enterprise risk tolerance.

G.is incorrect. In level 2 of risk management capability maturity model, risk tolerance is set
locally and may be difficult to aggregate.

Question 692

The BEST indication that risk management is effective is when risk has been reduced to meet:

A.risk levels.

B.risk capacity.

C.risk budgets.

D.risk appetite.

Question 693

You are the risk official in Techmart Inc. You are asked to perform risk assessment on the impact of losing a server. For this assessment you need to calculate monetary value of the server. On which of the following bases do you calculate monetary value?

A.Cost to obtain replacement

B.Original cost to acquire

C.Annual loss expectancy

D.Cost of software stored

E.Explanation:
The monetary value of the server should be based on the cost of its replacement. However, the financial impact to the enterprise may be much broader, based on the function that the server
performs for the business and the value it brings to the enterprise.

Question 694

Which of the following is MOST important to ensure when continuously monitoring the performance of a client- facing application?

A.Performance information in the log is encrypted.

B.Control owners approve control changes.

C.Objectives are confirmed with the business owner.

D.End-user acceptance testing has been conducted.

Question 695

You are the project manager of the GHY project for your organization. You are working with your project team to begin identifying risks for the project. As part of your preparation for identifying the risks within the project you will need eleven inputs for the process. Which one of the following is NOT an input to the risk identification process?

A.Quality management plan

B.Stakeholder register

C.Cost management plan

D.Procurement management plan

Other Version: 3496ISACA.CRISC.v2025-07-19.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12586ISACA.CRISC.v2022-08-23.q834; 15420ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 108Oracle.1z0-1196-25.v2025-09-12.q18; 107NetworkAppliance.NS0-162.v2025-09-12.q86; 147OCEG.GRCP.v2025-09-11.q211; 108HP.HPE0-V27.v2025-09-11.q78; 124Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 138SAP.C-S4EWM-2023.v2025-09-08.q83; 183TheSecOpsGroup.CNSP.v2025-09-08.q20; 263CFAInstitute.ESG-Investing.v2025-09-08.q173; 252PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 691

Question 692

Question 693

Question 694

Question 695

Download PDF File