Certified in Risk and Information Systems Control (CRISC) Free Practice Exam Questions

1451 real Certified in Risk and Information Systems Control (CRISC) exam questions with answers and AI explanations. ISACA certification prep — page 137 of 146.

1. Question 1364: An organization's board of directors is concerned about recent data breaches in the news and wants to assess its exposure to similar scenarios. Which of the fo…
2. Question 1365: An organization operates in an environment where the impact of ransomware attacks is high, with a low likelihood. After quantifying the impact of the risk asso…
3. Question 1366: What should be the immediate action upon discovery that users of a critical finance application have potentially excessive privileges?
4. Question 1367: Which of the following is the MOST important reason to communicate control effectiveness to senior management?
5. Question 1368: Who is BEST suited to own an IT risk scenario in an organization where only one IT support person knows how to maintain a core business application?
6. Question 1369: An organization is moving its critical assets to the cloud. Which of the following is the MOST important key performance indicator (KPI) to include in the serv…
7. Question 1370: Which of the following is BEST to use as a basis for developing a comprehensive list of IT risk scenarios?
8. Question 1371: Which of the following would BEST indicate to senior management that IT processes are improving?
9. Question 1372: Which of the following activities should only be performed by the third line of defense?
10. Question 1373: An IT operations team implements disaster recovery controls based on decisions from application owners regarding the level of resiliency needed. Who is the con…