Free Isaca CRISC Exam Questions

Become Isaca Certified with updated CRISC exam questions and correct answers

Page: 1 / 364

Total 1818 Questions | Updated On: Jan 10, 2025

Add To Cart

Question 1

Which of the following is the MOST important information for determining inherent risk?

A : The effectiveness of controls in place to prevent the risk

B : Loss the risk has historically caused

C : The IT risk manager's view of emerging risk

D : The maturity of the control environment

Answer: B

Question 2

You work as a project manager for Bluewell Inc. You have identified a project risk. You have then implemented the risk action plan and it turn out to be non- effective. What type of plan you should implement in such case?

A : k mitigation

B : k fallback plan

C : k avoidance

D : k response plan

Answer: B

Question 3

An organization’s Internet-facing server was successfully attacked because the server did not have the latest security patches. The risk associated with poor patch management had been documented in the risk register and accepted. Who should be accountable for any related losses to the organization?

A : IT risk manager

B : Risk practitioner

C : Server administrator

D : Risk owner

Answer: D

Question 4

The BEST control to mitigate the risk associated with project scope creep is to:

A : nsult with senior management on a regular basis

B : ply change management procedures

C : ure extensive user involvement

D : ploy CASE tools in software development

Answer: A

Question 5

Which of the following processes is described in the statement below?

"It is the process of implementing risk response plans, tracking identified risks, monitoring residual risk, identifying new risks, and evaluating risk process effectiveness throughout the project."

A : rform Quantitative Risk Analysis

B : nitor and Control Risks

C : entify Risks

D : rform Qualitative Risk Analysis

Answer: B

Page: 1 / 364

Total 1818 Questions | Updated On: Jan 10, 2025

Add To Cart