Online Access Free CRISC Exam Questions

A failed IT system upgrade project has resulted in the corruption of an organization ' s asset inventory database. Which of the following controls BEST mitigates the impact of this incident?

• A.Backups
• B.Configuration
• C.Encryption
• D.Authentication

An organization delegates its data processing to the internal IT team to manage information through its applications. Which of the following is the role of the internal IT team in this situation?

• A.Data owners
• B.Data custodians
• C.Data controllers
• D.Data processors

Which of the following is MOST important to ensure when continuously monitoring the performance of a client-facing application?

• A.End-user acceptance testing has been conducted.
• B.Control owners approve control changes.
• C.Performance information in the log is encrypted.
• D.Objectives are confirmed with the business owner.

Which of the following is the GREATEST concern related to the monitoring of key risk indicators (KRIs)?

• A.Logs are reviewed annually.
• B.Logs are modified before analysis is conducted.
• C.Logs are stored in a multi-tenant cloud environment.
• D.Logs are retained for longer than required.

Which of the following is the PRIMARY reason to use administrative controls in conjunction with technical controls?

• A.To comply with industry best practices by balancing multiple types of controls
• B.To address multiple risk scenarios mitigated by technical controls
• C.To gain stakeholder support for the implementation of controls
• D.To improve the effectiveness of controls that mitigate risk