Certified in Risk and Information Systems Control (CRISC) Free Practice Exam Questions

1451 real Certified in Risk and Information Systems Control (CRISC) exam questions with answers and AI explanations. ISACA certification prep — page 131 of 146.

1. Question 1304: Which of the following controls is an example of non-technical controls?
2. Question 1305: A large organization recently restructured the IT department and has decided to outsource certain functions. What action should the control owners in the IT de…
3. Question 1306: What is the MOST important consideration when selecting key performance indicators (KPIs) for control monitoring?
4. Question 1307: Which of the following should be of GREATEST concern to a risk practitioner reviewing an organization’s disaster recovery plan (DRP)?
5. Question 1308: An organization uses a web application hosted by a cloud service that is populated by data sent to the vendor via email on a monthly basis. Which of the follow…
6. Question 1309: Which of the following will have the GREATEST influence on the residual risk level in an organization?
7. Question 1310: Which of the following would produce the MOST comprehensive and relevant enterprise risk scenarios?
8. Question 1311: Which of the following should be done FIRST when developing an initial set of risk scenarios for an organization?
9. Question 1312: Of the following, who should be responsible for determining the inherent risk rating of an application?
10. Question 1313: Which of the following is an output of risk assessment process?