Online Access Free ISACA.CRISC.v2025-01-04.q999 Practice Test (Page 55)

CRISC Exam Question 266

Which of the following is described by the definition given below?
"It is the expected guaranteed value of taking a risk."

A.Certainty equivalent value

B.Risk premium

C.Risk value guarantee

D.Certain value assurance

CRISC Exam Question 267

Which of the following is the BEST way to mitigate the risk to IT infrastructure availability?

A.Establishing a disaster recovery plan (DRP)

B.Establishing recovery time objectives (RTOs)

C.Maintaining a current list of staff contact delays

D.Maintaining a risk register

CRISC Exam Question 268

You are the project manager of a large networking project. During the execution phase the customer requests for a change in the existing project plan. What will be your immediate action?

A.Update the risk register.

B.Ask for a formal change request.

C.Ignore the request as the project is in the execution phase.

D.Refuse the change request.

E.Explanation:
Whenever the customer or key stakeholder asks for a change in the existing plan, you should ask him/her to submit a formal change request. Change requests may modify project policies or procedures, project scope, project cost or budget, project schedule, or project quality.

CRISC Exam Question 269

While reviewing a contract of a cloud services vendor, it was discovered that the vendor refuses to accept liability for a sensitive data breach. Which of the following controls will BES reduce the risk associated with such a data breach?

A.Using the same cloud vendor as a competitor

B.Ensuring the vendor does not know the encryption key

C.Engaging a third party to validate operational controls

D.Using field-level encryption with a vendor supplied key

CRISC Exam Question 270

A project team member has just identified a new project risk. The risk event is determined to have significant impact but a low probability in the project. Should the risk event happen it'll cause the project to be delayed by three weeks, which will cause new risk in the project. What should the project manager do with the risk event?

A.Add the identified risk to a quality control management chart.

B.Add the identified risk to the issues log.

C.Add the identified risk to the risk register.

D.Add the identified risk to the low-level risk watch-list.

E.Explanation:
All identified risks, their characteristics, responses, and their status should be added and monitored as part of the risk register. A risk register is an inventory of risks and exposure associated with those risks. Risks are commonly found in project management practices, and provide information to identify, analyze, and manage risks. Typically a risk register contains: A description of the risk The impact should this event actually occur The probability of its occurrence Risk Score (the multiplication of Probability and Impact) A summary of the planned response should the event occur A summary of the mitigation (the actions taken in advance to reduce the probability and/or impact of the event) Ranking of risks by Risk Score so as to highlight the highest priority risks to all involved.

Other Version: 1093ISACA.CRISC.v2025-08-27.q675; 1477ISACA.CRISC.v2024-06-13.q683; 2167ISACA.CRISC.v2024-04-02.q999; 2752ISACA.CRISC.v2023-07-10.q544; 5436ISACA.CRISC.v2022-05-25.q338; 76ISACA.Actual4dump.CRISC.v2022-04-12.by.newman.349q.pdf; 5245ISACA.CRISC.v2022-02-22.q349; 5070ISACA.CRISC.v2021-10-27.q295; 42ISACA.Updatedumps.CRISC.v2021-09-05.by.bonnie.114q.pdf

Latest Upload: 131Microsoft.SC-400.v2025-09-20.q290; 369ISACA.CGEIT.v2025-09-19.q537; 157Fortinet.FCP_FWF_AD-7.4.v2025-09-18.q62; 158Scrum.SAFe-Practitioner.v2025-09-18.q63; 154Workday.Workday-Prism-Analytics.v2025-09-17.q17; 134Oracle.1Z0-1055-24.v2025-09-17.q28; 131Oracle.1Z1-182.v2025-09-17.q32; 257Nutanix.NCP-US-6.5.v2025-09-16.q73; 275Oracle.1z0-071.v2025-09-16.q232; 205Oracle.1Z1-922.v2025-09-16.q125

CRISC Exam Question 266

CRISC Exam Question 267

CRISC Exam Question 268

CRISC Exam Question 269

CRISC Exam Question 270

Download PDF File