Flat 30% Discount on Isaca CRISC Dumps | PassExam4Sure
                      
 
Isaca
 
CRISC
 
Certified in Risk and Information Systems Control
 
For more  info:
https://www.passexam4sure.com/isaca/crisc-exam-dumps.html
 
Version: 17.0 
 
Question: 1 
     
Which of the following attributes of a key risk indicator (KRI) is MOST important? 
 
A. Repeatable 
B. Automated 
C. Quantitative 
D. Qualitative 
 
Answer: A     
 
Question: 2 
   
A systems interruption has been traced to a personal USB device plugged into the corporate network by 
an IT employee who bypassed internal control procedures. Of the following, who should be 
accountable? 
 
A. Business continuity manager (BCM) 
B. Human resources manager (HRM) 
C. Chief risk officer (CRO) 
D. Chief information officer (CIO) 
 
Answer: D     
 
Question: 3 
   
A risk practitioner is summarizing the results of a high-profile risk assessment sponsored by senior 
management. The BEST way to support risk-based decisions by senior management would be to: 
 
A. map findings to objectives. 
B. provide a quantified detailed analysts. 
C. recommend risk tolerance thresholds. 
D. quantify key risk indicators (KRls). 
 
Answer: A     
 
 
Question: 4 
   
A rule-based data loss prevention {DLP) tool has recently been implemented to reduce the risk of 
sensitive data leakage Which of the following is MOST likely to change as a result of this 
implementation? 
 
A. Risk likelihood 
B. Risk velocity 
C. Risk appetite 
D. Risk impact 
 
Answer: A     
 
Question: 5 
   
Which of the following is MOST critical when designing controls? 
 
A. Involvement of internal audit 
B. Involvement of process owner 
C. Quantitative impact of the risk 
D. Identification of key risk indicators 
 
Answer: B     
 
Question: 6 
   
Which of the following is the GREATEST concern associated with redundant data in an organization's 
inventory system? 
 
A. Poor access control 
B. Unnecessary data storage usage 
C. Data inconsistency 
D. Unnecessary costs of program changes 
 
Answer: C     
 
Question: 7 
   
Which of the following is the MOST useful indicator to measure the efficiency of an identity and access 
management process? 
 
 
A. Number of tickets for provisioning new accounts 
B. Average time to provision user accounts 
C. Password reset volume per month 
D. Average account lockout time 
 
Answer: C     
 
Question: 8 
   
The analysis of which of the following will BEST help validate whether suspicious network activity is 
malicious? 
 
A. Logs and system events 
B. Intrusion detection system (IDS) rules 
C. Vulnerability assessment reports 
D. Penetration test reports 
 
Answer: B     
 
Question: 9 
   
Which of the following is the MOST important requirement for monitoring key risk indicators (KRls) 
using log analysis? 
 
A. Obtaining logs m an easily readable format 
B. Providing accurate logs m a timely manner 
C. Collecting logs from the entire set of IT systems 
D. implementing an automated log analysis tool 
 
Answer: B     
 
Question: 10 
   
Which of the following is the MOST important outcome of reviewing the risk management process? 
 
A. Assuring the risk profile supports the IT objectives 
B. Improving the competencies of employees who performed the review 
C. Determining what changes should be nude to IS policies to reduce risk 
D. Determining that procedures used in risk assessment are appropriate 
 
Answer: A