Free Access ISACA.CRISC.v2024-09-11.q999 Practice Test (Page 51)

Question 246

Which of the following should be a risk practitioner's NEXT action after identifying a high probability of data loss in a system?

A.Enhance the security awareness program.

B.Increase the frequency of incident reporting.

C.Purchase cyber insurance from a third party.

D.Conduct a control assessment.

Question 247

During a routine check, a system administrator identifies unusual activity indicating an intruder within a firewall. Which of the following controls has MOST likely been compromised?

A.Identification

B.Data integrity

C.Authentication

D.Data validation

Question 248

John is the project manager of the NHQ Project for his company. His project has 75 stakeholders, some of which are external to the organization. John needs to make certain that he communicates about risk in the most appropriate method for the external stakeholders. Which project management plan will be the best guide for John to communicate to the external stakeholders?

A.Risk Response Plan

B.Communications Management Plan

C.Project Management Plan

D.Risk Management Plan

E.Explanation:
The Communications Management Plan will direct John on the information to be communicated, when to communicate, and how to communicate with external stakeholders. The Communications Management Plan aims to define the communication necessities for the project and how the information will be circulated. The Communications Management Plan sets the communication structure for the project. This structure provides guidance for communication throughout the project's life and is updated as communication needs change. The Communication Managements Plan identifies and defines the roles of persons concerned with the project. It includes a matrix known as the communication matrix to map the communication requirements of the project.

Question 249

Which of the following business requirements MOST relates to the need for resilient business and information systems processes?

A.Confidentiality

B.Effectiveness

C.Integrity

D.Availability

Question 250

You are the project manager of a large construction project. This project will last for 18 months and will cost $750,000 to complete. You are working with your project team, experts, and stakeholders to identify risks within the project before the project work begins. Management wants to know why you have scheduled so many risk identification meetings throughout the project rather than just initially during the project planning. What is the best reason for the duplicate risk identification sessions?

A.The iterative meetings allow all stakeholders to participate in the risk identification processes throughout the project phases.

B.The iterative meetings allow the project manager to discuss the risk events which have passed the project and which did not happen.

C.The iterative meetings allow the project manager and the risk identification participants to identify newly discovered risk events throughout the project.

D.The iterative meetings allow the project manager to communicate pending risks events during project execution.

E.Explanation:
Risk identification is an iterative process because new risks may evolve or become known as the project progresses through its life cycle.

Other Version: 3611ISACA.CRISC.v2025-07-19.q999; 7513ISACA.CRISC.v2022-10-10.q527; 12588ISACA.CRISC.v2022-08-23.q834; 15493ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 115Genesys.GCX-GCD.v2025-09-13.q25; 115Huawei.H12-725_V4.0.v2025-09-13.q21; 116Oracle.1z0-1196-25.v2025-09-12.q18; 112NetworkAppliance.NS0-162.v2025-09-12.q86; 362OCEG.GRCP.v2025-09-11.q211; 114HP.HPE0-V27.v2025-09-11.q78; 138Oracle.1Z0-1057-23.v2025-09-10.q47; 182Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 148SAP.C-S4EWM-2023.v2025-09-08.q83; 298TheSecOpsGroup.CNSP.v2025-09-08.q20

Question 246

Question 247

Question 248

Question 249

Question 250

Download PDF File