[2024年09月] 練習で合格させる問題学習ガイドは CRISC 試験問題集 [Q311-Q331]

新問題 311
Which of the following would BEST provide early warning of a high-risk condition?

新問題 312
If preventive controls cannot be implemented due to technology limitations, which of the following should be done FIRST to reduce risk?

新問題 313
What is the GREATEST concern with maintaining decentralized risk registers instead of a consolidated risk register?

新問題 314
Fred is the project manager of a large project in his organization. Fred needs to begin planning the risk management plan with the project team and key stakeholders. Which plan risk management process tool and technique should Fred use to plan risk management?

新問題 315
Which of the following can be interpreted from a single data point on a risk heat map?

新問題 316
Which of the following is the MOST important consideration when selecting key risk indicators (KRIs) to monitor risk trends over time?

新問題 317
A business unit has decided to accept the risk of implementing an off-the-shelf, commercial software package that uses weak password controls. The BEST course of action would be to:

新問題 318
Which of the following is the MOST effective way to validate organizational awareness of cybersecurity risk?

新問題 319
An organization has completed a project to implement encryption on all databases that host customer data.
Which of the following elements of the risk register should be updated the reflect this change?

新問題 320
Which of the following methods involves the use of predictive or diagnostic analytical tool for exposing risk factors?

新問題 321
Which of the following are the principles of risk management?
Each correct answer represents a complete solution. Choose three.

新問題 322
Which of the following should be the PRIMARY focus of an independent review of a risk management process?

新問題 323
Which of the following should be the MOST important consideration when determining controls necessary for a highly critical information system?

新問題 324
Which of the following is the PRIMARY objective of providing an aggregated view of IT risk to business management?

新問題 325
Which of the following establishes mandatory rules, specifications and metrics used to measure compliance against quality, value, etc?

新問題 326
You work as a project manager for TechSoft Inc. You are working with the project stakeholders on the qualitative risk analysis process in your project. You have used all the tools to the qualitative risk analysis process in your project. Which of the following techniques is NOT used as a tool in qualitative risk analysis process?

新問題 327
An organization has four different projects competing for funding to reduce overall IT risk. Which project should management defer?

新問題 328
Which of the following events refer to loss of integrity?
Each correct answer represents a complete solution. Choose three.

新問題 329
Which of the following is the BEST method to ensure a terminated employee’s access to IT systems is revoked upon departure from the organization?

新問題 330
An interruption in business productivity is considered as which of the following risks?

新問題 331
Suppose you are working in Company Inc. and you are using risk scenarios for estimating the likelihood and impact of the significant risks on this organization. Which of the following assessment are you doing?