Section: Volume D

Section: Volume A
Explanation/Reference:
Explanation:
Moderate risks are noticeable failure threatening the success of certain goals.
Incorrect Answers:
B: High risk is the significant failure impacting in certain goals not being met.
C: Extremely high risk are the risks that has large impact on enterprise and are most likely results in failure with severe consequences.
D: Low risks are the risk that results in certain unsuccessful goals.

A source code review is the process of examining and analyzing the source code of an application to identify any vulnerabilities, errors, or flaws that may compromise the security, functionality, or performance of the application. A source code review is the most effective way to identify an application backdoor prior to implementation, as it can detect any hidden or unauthorized code that may allow unauthorized access, bypass security controls, or execute malicious commands. A source code review can also help to improve the quality and reliability of the application, and ensure compliance with the coding standards and best practices. References = CRISC Review Manual, 7th Edition, page 181.

Risk tolerance is the most useful input when evaluating the appropriateness of risk responses, as it defines the acceptable level of risk for the organization and guides the selection of the optimal risk response. Incident reports, cost-benefit analysis, and control objectives are also useful inputs, but they are not the most useful, as they provide information on the actual or potential impact, cost, and effectiveness of the risk responses, but not the desired level of risk. References = CRISC Review Manual, 7th Edition, page 108.