Question 1

Which of the following has the GREATEST impact on backup policies for a system supporting a critical process?

Options :

A : Impact of threats to the process

B : Recovery time objective (RTO)

C : Resource requirements of the process

D : Recovery point objective (RPO)

Answer: B

Question 2

You are the project manager of the KJH Project and are working with your project team to plan the risk responses. Consider that your project has a budget of

$500,000 and is expected to last six months. Within the KJH Project you have identified a risk event that has a probability of .70 and has a cost impact of

$350,000. When it comes to creating a risk response for this event what is the risk exposure of the event that must be considered for the cost of the risk response?

Options :

A : The risk exposure of the event is $350,000.

B : The risk exposure of the event is $500,000.

C : The risk exposure of the event is $850,000.

D : The risk exposure of the event is $245,000.

Answer: D

Question 3

As the sensitivity of the monitoring tool has to be changed, therefore it requires optimization of Key Risk Indicator. The monitoring tool which is giving alerts is itself acting as a risk indicator. Hence to change the sensitivity of the monitoring tool to give alert only for critical situations requires optimization of the KRI.

Incorrect Answers:

A, C, D: These options are not relevant to the change of sensitivity of the monitoring tools.

Options :

A : Acceptance

B : Transference

C : Enhance

D : Mitigation

Answer: A

Question 4

Which of the following is the MAIN reason for documenting the performance of controls?

Options :

A : Justifying return on investment

B : Demonstrating effective risk mitigation

C : Providing accurate risk reporting

D : Obtaining management sign-off

Answer: B

Question 5

Which of the following is BEST to use when creating cyber risk scenarios focused on the operational concerns of the organizationâ€™s cyber team

Options :

A : Qualitative cyber risk assessment

B : Top-down approach

C : Bottom-up approach

D : Quantitative cyber risk assessment

Answer: C

Smartly Prepare Exam with Free Online CRISC Practice Test

Buying Options: