Question 1

Which of the following is the BEST way for a risk practitioner to present an annual risk management update to the board?

Options :

A : A summary of IT risk scenarios with business cases

B : A summary of risk response plans with validation results

C : A report with control environment assessment results

D : A dashboard summarizing key risk indicators (KRIs)

Answer: C

Question 2

You are the project manager for GHT project. You need to perform the Qualitative risk analysis process. When you have completed this process, you will produce all of the following as part of the risk register update output except which one?

Options :

A : Probability of achieving time and cost estimates

B : Priority list of risks

C : Watch list of low-priority risks

D : Risks grouped by categories

Answer: A

Question 3

What is the GREATEST concern with maintaining decentralized risk registers instead of a consolidated risk register?

Options :

A : Aggregated risk may exceed the enterprise-s risk appetite and tolerance.

B : Duplicate resources may be used to manage risk registers.

C : Standardization of risk management practices may be difficult to enforce.

D : Risk analysis may be inconsistent due to non-uniform impact and likelihood scales.

Answer: D

Question 4

Which of the following MUST be assessed before considering risk treatment options for a scenario with significant impact?

Options :

A : Cost-benefit analysis.

B : Incident probability.

C : Risk magnitude.

D : Risk appetite.

Answer: C

Question 5

To measure improvements in the performance of spam email filtering software, which of the following key performance indicators (KPIs) would be MOST useful to monitor?

Options :

A : The number of spam messages not detected by the email filter

B : The number of spam messages received by the email filtering software

C : The number of messages classified as spam by the email filter

D : he number of phishing attacks conducted through spam email messages

Answer: A