Online Access Free ISACA.CRISC.v2024-04-02.q999 Practice Test (Page 22)

CRISC Exam Question 101

Which of the following MUST be assessed before considering risk treatment options for a scenario with significant impact?

A.Incident probability

B.Risk magnitude

C.Cost-benefit analysis

D.Risk appetite

CRISC Exam Question 102

You work as the project manager for Company Inc. The project on which you are working has several risks that will affect several stakeholder requirements. Which project management plan will define who will be available to share information on the project risks?

A.Resource Management Plan

B.Communications Management Plan

C.Risk Management Plan

D.Stakeholder management strategy

E.Explanation:
The Communications Management Plan defines, in regard to risk management, who will be available to share information on risks and responses throughout the project. The Communications Management Plan aims to define the communication necessities for the project and how the information will be circulated. The Communications Management Plan sets the communication structure for the project. This structure provides guidance for communication throughout the project's life and is updated as communication needs change. The Communication Managements Plan identifies and defines the roles of persons concerned with the project. It includes a matrix known as the communication matrix to map the communication requirements of
the project.

F.is incorrect. The stakeholder management strategy does not address risk
communications.

G.is incorrect. The Risk Management Plan deals with risk identification, analysis,
response, and monitoring.

CRISC Exam Question 103

Which of the following is the way to verify control effectiveness?

A.The capability of providing notification of failure.

B.Whether it is preventive or detective.

C.Its reliability.

D.The test results of intended objectives.

CRISC Exam Question 104

The risk appetite for an organization could be derived from which of the following?

A.Inherent risk

B.Residual risk

C.Annual loss expectancy (ALE)

D.Cost of controls

CRISC Exam Question 105

The PRIMARY objective of a risk identification process is to:

A.evaluate how risk conditions are managed.

B.estimate anticipated financial impact of risk conditions.

C.determine threats and vulnerabilities.

D.establish risk response options.

Other Version: 1006ISACA.CRISC.v2025-08-27.q675; 3104ISACA.CRISC.v2025-01-04.q999; 1401ISACA.CRISC.v2024-06-13.q683; 2686ISACA.CRISC.v2023-07-10.q544; 5409ISACA.CRISC.v2022-05-25.q338; 76ISACA.Actual4dump.CRISC.v2022-04-12.by.newman.349q.pdf; 5217ISACA.CRISC.v2022-02-22.q349; 5053ISACA.CRISC.v2021-10-27.q295; 42ISACA.Updatedumps.CRISC.v2021-09-05.by.bonnie.114q.pdf

Latest Upload: 273ISACA.CGEIT.v2025-09-19.q537; 153Fortinet.FCP_FWF_AD-7.4.v2025-09-18.q62; 154Scrum.SAFe-Practitioner.v2025-09-18.q63; 146Workday.Workday-Prism-Analytics.v2025-09-17.q17; 131Oracle.1Z0-1055-24.v2025-09-17.q28; 129Oracle.1Z1-182.v2025-09-17.q32; 243Nutanix.NCP-US-6.5.v2025-09-16.q73; 265Oracle.1z0-071.v2025-09-16.q232; 203Oracle.1Z1-922.v2025-09-16.q125; 325CyberArk.PAM-CDE-RECERT.v2025-09-15.q100

CRISC Exam Question 101

CRISC Exam Question 102

CRISC Exam Question 103

CRISC Exam Question 104

CRISC Exam Question 105

Download PDF File