Online Access Free CRISC Exam Questions

Which of the following is the BEST recommendation of a risk practitioner for an organization that recently changed its organizational structure?

• A.Implement a new risk assessment process.
• B.Review and adjust key risk indicators (KRIs).
• C.Communicate the new risk profile.
• D.Revalidate the corporate risk appetite.

Which of the following would be MOST relevant to stakeholders regarding ineffective control implementation?

• A.Threat to IT
• B.Number of control failures
• C.Risk ownership
• D.Impact on business

An organization has allowed its cyber risk insurance to lapse while seeking a new insurance provider. The risk practitioner should report to management that the risk has been:

• A.avoided
• B.accepted
• C.transferred
• D.mitigated.

Which of the following BEST assists in justifying an investment in automated controls?

• A.Cost-benefit analysis
• B.Reduction in personnel costs
• C.Alignment of investment with risk appetite
• D.Elimination of compensating controls

Which of the following is the MOST significant risk associated with using cloud computing for disaster recovery?

• A.Use of multiple cloud access service brokers (CASBs)
• B.Cloud vendor lock-in and dependency
• C.Availability issues with cloud storage solutions
• D.Lack of adequate incident management capabilities