ISACA-Certified in Risk and Information Systems Control Set 10

1.

Which of the following controls will BEST detect unauthorized modification of data by a database administrator?

Reviewing database access rights Reviewing changes to edit checks Comparing data to input records Reviewing database activity logs

2.

Which of the following is the PRIMARY purpose of periodically reviewing an organization's risk profile?

Design and implement risk response action plans Align business objectives with risk appetite Enable risk-based decision making Update risk responses in the risk register

3.

Which of the following risk register updates is MOST important for senior management to review?

Avoiding a risk that was previously accepted Extending the date of a future action plan by two months Retiring a risk scenario no longer used Changing a risk owner

4.

A risk practitioner is assisting with the preparation of a report on the organization's disaster recovery (DR) capabilities. Which information would have the MOST impact on the overall recovery profile?

The percentage of systems meeting recovery target times has increased The number of systems requiring a recovery plan has increased The number of systems tested in the last year has increased The percentage of systems with long recovery target times has decreased

5.

While evaluating control costs, management discovers that the annual cost exceeds the annual loss expectancy (ALE) of the risk. This indicates the:

control is ineffective and should be strengthened risk is inefficiently controlled risk is efficiently controlled control is weak and should be removed

6.

Which of the following would BEST ensure that identified risk scenarios are addressed?

Performing real-time monitoring of threats Creating a separate risk register for key business units Performing regular risk control self-assessments Reviewing the implementation of the risk response

7.

The MOST effective approach to prioritize risk scenarios is by:

assessing impact to the strategic plan soliciting input from risk management experts aligning with industry best practices evaluating the cost of risk response

8.

Which of the following is the MAIN reason to continuously monitor IT-related risk?

To ensure risk levels are within acceptable limits of the organization's risk appetite and risk tolerance To redefine the risk appetite and risk tolerance levels based on changes in risk factors To help identify root causes of incidents and recommend suitable long-term solutions To update the risk register to reflect changes in levels of identified and new IT-related risk

9.

A risk practitioner discovers several key documents detailing the design of a product currently in development have been posted on the Internet. What should be the risk practitioner's FIRST course of action?

Perform a root cause analysis Conduct an immediate risk assessment Invoke the established incident response plan Inform internal audit

10.

Which of the following is the MOST important consideration when sharing risk management updates with executive management?

Using an aggregated view of organizational risk Relying on key risk indicator (KRI) data Ensuring relevance to organizational goals Including trend analysis of risk metrics

ISACA-Certified in Risk and Information Systems Control Set 10

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

ISACA-Certified in Risk and Information Systems Control Set 10

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner