ISACA-Certified in Risk and Information Systems Control Set 3

1.

Which of the following is NOT true for risk governance?

Risk governance is based on the principles of cooperation, participation, mitigation and sustainability, and is adopted to achieve more effective risk management. Risk governance requires reporting once a year. Risk governance seeks to reduce risk exposure and vulnerability by filling gaps in risk policy. Risk governance is a systemic approach to decision making processes associated to natural and technological risks.

2.

What are the various outputs of risk response?

Risk Priority Number Residual risk Risk register updates 885CB989129A5F974833949052CFB2F2 Project management plan and Project document updates Risk-related contract decisions

3.

Which of the following is an output of risk assessment process?

Identification of risk Identification of appropriate controls Mitigated risk Enterprise left with residual risk

4.

Which of the following is the most accurate definition of a project risk?

It is an unknown event that can affect the project scope. It is an uncertain event or condition within the project execution. It is an uncertain event that can affect the project costs. It is an uncertain event that can affect at least one project objective.

5.

Which of the following considerations should be taken into account while selecting risk indicators that ensures greater buy-in and ownership?

Lag indicator Lead indicator Root cause Stakeholder

6.

Suppose you are working in Techmart Inc. which sells various products through its website. Due to some recent losses, you are trying to identify the most important risks to the Website. Based on feedback from several experts, you have come up with a list. You now want to prioritize these risks. Now in which category you would put the risk concerning the modification of the Website by unauthorized parties.

Ping Flooding Attack Web defacing Denial of service attack FTP Bounce Attack

7.

Which of the following is true for risk evaluation?

Risk evaluation is done only when there is significant change. Risk evaluation is done once a year for every business processes. Risk evaluation is done annually or when there is significant change. Risk evaluation is done every four to six months for critical business processes.

8.

Using which of the following one can produce comprehensive result while performing qualitative risk analysis?

Scenarios with threats and impacts Cost-benefit analysis Value of information assets. Vulnerability assessment

9.

Which of the following is MOST appropriate method to evaluate the potential impact of legal, regulatory, and contractual requirements on business objectives?

Communication with business process stakeholders Compliance-oriented business impact analysis Compliance-oriented gap analysis Mapping of compliance requirements to policies and procedures

10.

Wendy is about to perform qualitative risk analysis on the identified risks within her project. Which one of the following will NOT help Wendy to perform this project management activity?

Risk management plan Project scope statement Risk register Stakeholder register

ISACA-Certified in Risk and Information Systems Control Set 3

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

ISACA-Certified in Risk and Information Systems Control Set 3

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner