Free ISC2 CGRC Exam Questions

Become ISC2 Certified with updated CGRC exam questions and correct answers

Page: 1 / 79

Total 393 Questions | Updated On: Nov 13, 2024

Add To Cart

Question 1

The purpose of the asset identification task is to identify assets that require protection. Which of the following is not a potential input for this task?

A : Internal stakeholders

B : System information

C : System security plan

D : Business impact analysis

Answer: C

Question 2

Which of the following statements about OMB Circular A-130 is true?

A : It provides guidance on cybersecurity risk management for federal information systems.

B : It requires organizations to use the RMF to manage privacy risks.

C : It is applicable only to federal agencies in the United States.

D : It does not cover the management of federal information resources.

Answer: B

Question 3

True or False: Risk response is the final step in the NIST Risk Management Framework and involves implementing security controls to address identified risks.

A : TRUE

B : FALSE

Answer: B

Question 4

Which of the following best describes the benefits of using automation to support control assessments in the context of an information security program?

A : Automation completely eliminates the need for manual control assessments and human intervention

B : Automation reduces the time and effort required for control assessments by providing continuous monitoring and real-time reporting

C : Automation ensures that all security controls are implemented flawlessly, with no room for error

D : Automation guarantees that all assessed security controls will receive the highest possible effectiveness rating

Answer: B

Question 5

Which of the following is the MOST challenging aspect of asset identification in the context of information security risk management?

A : Identifying all assets within the organization's network

B : Determining the value of each asset in terms of its importance to the organization

C : Identifying and categorizing assets based on their criticality to the organization's operations

D : Determining the level of risk associated with each asset

Answer: A

Page: 1 / 79

Total 393 Questions | Updated On: Nov 13, 2024

Add To Cart