Free Access ISACA.CRISC.v2024-09-11.q999 Practice Test (Page 197)

Question 976

When a risk cannot be sufficiently mitigated through manual or automatic controls, which of the following options will BEST protect the enterprise from the potential financial impact of the risk?

A.Updating the IT risk registry

B.Insuring against the risk

C.Outsourcing the related business process to a third party

D.Improving staff-training in the risk area

E.Explanation:
An insurance policy can compensate the enterprise up to 100% by transferring the risk to another company. Hence in this stem risk is being transferred.

Question 977

Which of the following is the MOST important reason to link an effective key control indicator (KCI) to relevant key risk indicators (KRIs)?

A.To monitor changes in the risk environment

B.To provide input to management for the adjustment of risk appetite

C.To monitor the accuracy of threshold levels in metrics

D.To obtain business buy-in for investment in risk mitigation measures

Question 978

Which of the following should be the PRIMARY focus of an IT risk awareness program?

A.Cultivate long-term behavioral change

B.Demonstrate regulatory compliance

C.Ensure compliance with the organization's internal policies

D.Communicate IT risk policy to the participants

Question 979

The PRIMARY objective of The board of directors periodically reviewing the risk profile is to help ensure:

A.performance of controls is adequate

B.the risk monitoring process has been established

C.the risk strategy is appropriate

D.KRIs and KPIs are aligned

Question 980

An organization has asked an IT risk practitioner to conduct an operational risk assessment on an initiative to outsource the organization's customer service operations overseas. Which of the following would MOST significantly impact management's decision?

A.Cross-border information transfer restrictions in the outsourcing country

B.Historical network latency between the organization and outsourcing location

C.Ongoing financial viability of the outsourcing company

D.Time zone difference of the outsourcing location

Other Version: 3335ISACA.CRISC.v2025-07-19.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12549ISACA.CRISC.v2022-08-23.q834; 15322ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 103OCEG.GRCP.v2025-09-11.q211; 102HP.HPE0-V27.v2025-09-11.q78; 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 222CFAInstitute.ESG-Investing.v2025-09-08.q173; 157PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 147Salesforce.Data-Architect.v2025-09-05.q216; 141Adobe.AD0-E605.v2025-09-05.q50

Question 976

Question 977

Question 978

Question 979

Question 980

Download PDF File