Free Access ISACA.CRISC.v2025-07-19.q999 Practice Test (Page 138)

Question 681

A payroll manager discovers that fields in certain payroll reports have been modified without authorization.
Which of the following control weaknesses could have contributed MOST to this problem?

A.Payroll files were not under the control of a librarian

B.The programmer had access to the production programs.

C.The programmer did not involve the user in testing.

D.The user requirements were not documented.

Question 682

A part of a project deals with the hardware work. As a project manager, you have decided to hire a company to deal with all hardware work on the project. Which type of risk response is this?

A.Transference

B.Mitigation

C.Avoidance

D.Exploit

E.Explanation:
When you are hiring a third party to own risk, it is known as transference risk response. Risk transfer means that impact of risk is reduced by transferring or otherwise sharing a portion of the risk with an external organization or another internal entity. Transfer of risk can occur in many forms but is most effective when dealing with financial risks. Insurance is one form of risk transfer.

Question 683

The best way to test the operational effectiveness of a data backup procedure is to:

A.inspect a selection of audit trails and backup logs

B.conduct an audit of files stored offsite

C.demonstrate a successful recovery from backup files

D.interview employees to compare actual with expected procedures

Question 684

Which of the following should be management's PRIMARY focus when key risk indicators (KRIs) begin to rapidly approach defined thresholds?

A.Determining if KRIs have been updated recently

B.Designing compensating controls

C.Determining what has changed in the environment

D.Assessing the effectiveness of the incident response plan

Question 685

Which of the following aspects are included in the Internal Environment Framework of COSO ERM?
Each correct answer represents a complete solution. Choose three.

A.Enterprise's integrity and ethical values

B.Enterprise's working environment

C.Enterprise's human resource standards

D.Enterprise's risk appetite

Other Version: 6564ISACA.CRISC.v2024-09-11.q999; 7512ISACA.CRISC.v2022-10-10.q527; 12586ISACA.CRISC.v2022-08-23.q834; 15418ISACA.CRISC.v2022-05-05.q821; 66ISACA.Examboosts.CRISC.v2021-09-26.by.erica.460q.pdf

Latest Upload: 107Oracle.1z0-1196-25.v2025-09-12.q18; 106NetworkAppliance.NS0-162.v2025-09-12.q86; 146OCEG.GRCP.v2025-09-11.q211; 107HP.HPE0-V27.v2025-09-11.q78; 123Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 137SAP.C-S4EWM-2023.v2025-09-08.q83; 182TheSecOpsGroup.CNSP.v2025-09-08.q20; 262CFAInstitute.ESG-Investing.v2025-09-08.q173; 250PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 681

Question 682

Question 683

Question 684

Question 685

Download PDF File