Online Access Free IT-Risk-Fundamentals Exam Questions

Key risk indicators (KRIs) are metrics designed to:

• A.be a direct measure of risk for each business line.
• B.alert there is an increased chance of exceeding risk appetite.
• C.measure current risk levels in comparison to past levels.

Of the following, which stakeholder group is MOST often responsible for risk governance?

• A.Enterprise risk management (ERM)
• B.Board of directors
• C.Business units

Which of the following is a KEY contributing component for determining risk rankings to direct risk response?

• A.Severity of a vulnerability
• B.Maturity of risk management processes
• C.Cost of mitigating controls

Which of the following is the MOST important aspect of key performance indicators (KPIs)?

• A.KPIs aid management in monitoring the organization's IT infrastructure capacity.
• B.KPIs provide inputs for monitoring the usage of IT assets to determine return on investment (ROI).
• C.KPIs identify underperforming assets that may impact the achievement of operational goals.

Which of the following is the MAIN reason to conduct a penetration test?

• A.To validate the results of a control self-assessment
• B.To validate the results of a vulnerability assessment
• C.To validate the results of a threat assessment