No Result
View All Result
Quesions Library
Contribute
No Result
View All Result
No Result
View All Result

 


Questions › Category: CRISC
Filter:AllUnanswered
An organization wants to grant remote access to a system containing sensitive data to an overseas third party. Which of the following should be of GREATEST concern to management?
Admin asked 10 months ago • 
51 views0 answers0 votes
When an organization's disaster recovery plan has a reciprocal agreement, which of the following risk treatment options is being applied?
Anonymous commented 55 years ago • 
47 views0 answers0 votes
Which of the following baselines identifies the specifications required by the resource that meet the approved requirements?
Anonymous commented 55 years ago • 
36 views0 answers0 votes
You are elected as the project manager of GHT project. You are in project initialization phase and are busy in defining requirements for your project. While defining requirements you are describing how users will interact with a system. Which of the following requirements are you defining here?
Anonymous commented 55 years ago • 
32 views0 answers0 votes
A company has recently acquired a customer relationship management (CRM) application from a certified software vendor. Which of the following will BEST help to prevent technical vulnerabilities from being exploited?
Anonymous commented 55 years ago • 
241 views0 answers0 votes
Upon learning that the number of failed back-up attempts continually exceeds the current risk threshold, the risk practitioner should:
Anonymous commented 55 years ago • 
61 views0 answers0 votes
A technology company is developing a strategic artificial intelligence (AI)-driven application that has high potential business value. At what point should the enterprise risk profile be updated?
Anonymous commented 55 years ago • 
53 views0 answers0 votes
The risk associated with an asset after controls are applied can be expressed as:
Anonymous commented 55 years ago • 
42 views0 answers0 votes
An application owner has specified the acceptable downtime in the event of an incident to be much lower than the actual time required for the response team to recover the application. Which of the following should be the NEXT course of action?
Admin asked 10 months ago • 
46 views0 answers0 votes
What is the FIRST phase of IS monitoring and maintenance process?
Anonymous commented 55 years ago • 
39 views0 answers0 votes
Which of the following would provide the MOST objective assessment of the effectiveness of an organization's security controls?
Anonymous commented 55 years ago • 
25 views0 answers0 votes
The MAIN purpose of having a documented risk profile is to:
Admin asked 10 months ago • 
14 views0 answers0 votes
Reviewing which of the following is the BEST way to gauge the effectiveness of a web application firewall (WAF)?
Admin asked 10 months ago • 
29 views0 answers0 votes
Warning banners on login screens for laptops provided by an organization to its employees are an example of which type of control?
Admin asked 10 months ago • 
21 views0 answers0 votes
Who is BEST suited to provide information to the risk practitioner about the effectiveness of a technical control associated with an application?
Admin asked 10 months ago • 
21 views0 answers0 votes
An organization has established a policy prohibiting ransom payments if subjected to a ransomware attack. Which of the following is the MOST effective control to support this policy?
Admin asked 10 months ago • 
27 views0 answers0 votes
Which of the following is an example of the second line in the three lines of defense model?
Admin asked 10 months ago • 
23 views0 answers0 votes
Which of the following is MOST important for a risk practitioner to understand about an organization in order to create an effective risk awareness program?
Admin asked 10 months ago • 
25 views0 answers0 votes
Which of the following should be the PRIMARY focus of a disaster recovery management (DRM) framework and related processes?
Admin asked 10 months ago • 
32 views0 answers0 votes
Which of the following is PRIMARILY responsible for providing assurance to the board of directors and senior management during the evaluation of a risk management program implementation?
Admin asked 10 months ago • 
26 views0 answers0 votes
123…95Next »

Other exams

No Result
View All Result

Welcome Back!

Login to your account below

Forgotten Password? Sign Up

Create New Account!

Fill the forms below to register

All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In