Certified in Risk and Information Systems Control (CRISC) Free Practice Exam Questions

1451 real Certified in Risk and Information Systems Control (CRISC) exam questions with answers and AI explanations. ISACA certification prep — page 34 of 146.

  1. Question 334: Which of the following statements BEST illustrates the relationship between key performance indicators (KPIs) and key control indicators (KCIs)?
  2. Question 335: When collecting information to identify IT-related risk, a risk practitioner should FIRST focus on IT:
  3. Question 336: Which of the following should be an element of the risk appetite of an organization?
  4. Question 337: A deficient control has been identified which could result in great harm to an organization should a low frequency threat event occur. When communicating the a…
  5. Question 338: Which of the following will BEST help in communicating strategic risk priorities?
  6. Question 339: During a control review, the control owner states that an existing control has deteriorated over time. What is the BEST recommendation to the control owner?
  7. Question 340: Implementing which of the following controls would BEST reduce the impact of a vulnerability that has been exploited?
  8. Question 341: A new international data privacy regulation requires personal data to be disposed after the specified retention period, which is different from the local regul…
  9. Question 342: An IT organization is replacing the customer relationship management (CRM) system. Who should own the risk associated with customer data leakage caused by insu…
  10. Question 343: Which of the following is the GREATEST benefit when enterprise risk management (ERM) provides oversight of IT risk management?