最新的ISACA Certified in Risk and Information Systems Control - CRISC免費考試真題
An incentive program is MOST likely implemented to manage the risk associated with loss of which organizational asset?
正確答案: B
說明：（僅 Fast2test 成員可見）
Which of the following is the MOST important component of effective security incident response?
正確答案: C
說明：（僅 Fast2test 成員可見）
Which of the following risk events would require the creation of a business continuity plan (BCP)?
正確答案: A
說明：（僅 Fast2test 成員可見）
The results of a risk assessment reveal risk scenarios with high impact and low likelihood of occurrence.
Which of the following would be the BEST action to address these scenarios?
Which of the following would be the BEST action to address these scenarios?
正確答案: C
說明：（僅 Fast2test 成員可見）
The GREATEST benefit of including low-probability, high-impact events in a risk assessment is the ability to:
正確答案: C
說明：（僅 Fast2test 成員可見）
The purpose of requiring source code escrow in a contractual agreement is to:
正確答案: D
說明：（僅 Fast2test 成員可見）
Which of the following is the BEST approach when a risk treatment plan cannot be completed on time?
正確答案: A
說明：（僅 Fast2test 成員可見）
Which of the following provides the MOST up-to-date information about the effectiveness of an organization
' s overall IT control environment?
' s overall IT control environment?
正確答案: D
說明：（僅 Fast2test 成員可見）
Which of the following changes would be reflected in an organization ' s risk profile after the failure of a critical patch implementation?
正確答案: B
說明：（僅 Fast2test 成員可見）
Which of the following is the MOST effective way to integrate risk and compliance management?
正確答案: B
說明：（僅 Fast2test 成員可見）
While reviewing a contract of a cloud services vendor, it was discovered that the vendor refuses to accept liability for a sensitive data breach. Which of the following controls will BES reduce the risk associated with such a data breach?
正確答案: C
說明：（僅 Fast2test 成員可見）
Which of the following is the BEST method to identify weaknesses in an organization ' s technical environment that could be leveraged by an attacker to gain access?
正確答案: D
說明：（僅 Fast2test 成員可見）
An organization has completed a project to implement encryption on all databases that host customer data.
Which of the following elements of the risk register should be updated the reflect this change?
Which of the following elements of the risk register should be updated the reflect this change?
正確答案: D
說明：（僅 Fast2test 成員可見）
Which of the following risk management practices BEST facilitates the incorporation of IT risk scenarios into the enterprise-wide risk register?
正確答案: C
說明：（僅 Fast2test 成員可見）