CRISC 무료 덤프문제 온라인 액세스

Which of the following is the MOST appropriate role to determine risk appetite and tolerance?

• A.Risk owner
• B.Internal auditor
• C.Business process owner
• D.Senior management

Which of the following BEST indicates the condition of a risk management program?

• A.Number of risk register entries
• B.Number of controls
• C.Amount of residual risk
• D.Level of financial support

Which of the following would BEST facilitate the implementation of data classification requirements?

• A.Scheduling periodic audits
• B.Assigning a data owner
• C.Implementing a data loss prevention (DLP) solution
• D.Implementing technical controls over the assets

Which of the following is BEST measured by key control indicators (KCIs)?

• A.Effectiveness of organizational defense in depth
• B.Comprehensiveness of risk assessment procedures
• C.Cost efficiency of risk treatment plan projects
• D.Historical trends of the organizational risk profile

An organization has identified that terminated employee accounts are not disabled or deleted within the time required by corporate policy. Unsure of the reason, the organization has decided to monitor the situation for three months to obtain more information. As a result of this decision, the risk has been:

• A.accepted.
• B.avoided.
• C.transferred.
• D.mitigated.