무료 온라인 액세스 ISACA.CRISC.v2022-11-28.q315 모의 시험 (Page 22)

CRISC 문제 101

Which of the following are sub-categories of threat?
Each correct answer represents a complete solution. Choose three.

A. Natural and supernatural

B. Computer and user

C. Natural and man-made

D. Intentional and accidental

E. External and internal

정답: C,D,E

Explanation/Reference:
Explanation:
A threat is any event which have the potential to cause a loss. In other word, it is any activity that represents a possible danger. The loss or danger is directly related to one of the following:
Loss of confidentiality- Someone sees a password or a company's secret formula, this is referred to as

loss of confidentiality. Loss of integrity- An e-mail message is modified in transit, a virus infects a file, or someone makes unauthorized changes to a Web site is referred to as loss of integrity.
Loss of availability- An e-mail server is down and no one has e-mail access, or a file server is down so

data files aren't available comes under loss of availability.
Threat identification is the process of creating a list of threats. This list attempts to identify all the possible threats to an organization. The list can be extensive.
Threats are often sub-categorized as under:
External or internal- External threats are outside the boundary of the organization. They can also be

thought of as risks that are outside the control of the organization. While internal threats are within the boundary of the organization. They could be related to employees or other personnel who have access to company resources. Internal threats can be related to any hardware or software controlled by the business.
Natural or man-made- Natural threats are often related to weather such as hurricanes, tornadoes, and

ice storms. Natural disasters like earthquakes and tsunamis are also natural threats. A human or man- made threat is any threat which is caused by a person. Any attempt to harm resources is a man-made threat. Fire could be man-made or natural depending on how the fire is started.
Intentional or accidental- An attempt to compromise confidentiality, integrity, or availability is intentional.

While employee mistakes or user errors are accidental threats. A faulty application that corrupts data could also be considered accidental.

CRISC 문제 102

A monthly payment report is generated from the enterprise resource planning (ERP) software to validate data against the old and new payroll systems. What is the BEST way to mitigate the risk associated with data integrity loss in the new payroll system after data migration?

A. Compare processing output from both systems using the previous month's data.

B. Compare encrypted data with checksums.

C. Compare new system reports with functional requirements.

D. Compare results of user acceptance testing (UAT) with the testing criteria.

CRISC 문제 103

When it appears that a project risk is going to happen, what is this term called?

A. Issue

B. Contingency response

C. Trigger

D. Threshold

E. Explanation:
A trigger is a warning sign or a condition that a risk event is likely to occur within the project.

F. is incorrect. A contingency response is a pre-planned response for a risk event, such as
a rollback plan.

G. is incorrect. Issues are events that come about as a result of risk events. Risks become
issues only after they have actually occurred.

CRISC 문제 104

다음 중 SWOT 분석의 일부는 무엇입니까?
각 정답은 완전한 솔루션을 나타냅니다. 해당되는 것을 모두 선택하십시오.

A. 약점

B. 도구

C. 위협

D. 기회

E. 강점

F. 설명:
SWOT 분석은 프로젝트 또는 비즈니스 벤처와 관련된 강점, 약점, 기회 및 위협을 평가하는 데 사용되는 전략적 계획 방법입니다. 여기에는 비즈니스 벤처 또는 프로젝트의 목표를 지정하고 해당 목표를 달성하는 데 유리하거나 불리한 내부 및 외부 요인을 식별하는 것이 포함됩니다. 이 기술은 Fortune 500대 기업의 데이터를 사용하여 1960년대와 1970년대에 Stanford University에서 연구 프로젝트를 주도한 Albert Humphrey에게 인정되었습니다.

CRISC 문제 105

Which of the following statements are true for enterprise's risk management capability maturity level 3?

A. Workflow tools are used to accelerate risk issues and track decisions

B. The business knows how IT fits in the enterprise risk universe and the risk portfolio view

C. The enterprise formally requires continuous improvement of risk management skills, based on clearly defined personal and enterprise goals

D. Risk management is viewed as a business issue, and both the drawbacks and benefits of risk are recognized

다른 버전: 2066ISACA.CRISC.v2026-01-07.q193; 2727ISACA.CRISC.v2024-06-22.q668; 7737ISACA.CRISC.v2023-08-10.q988; 4219ISACA.CRISC.v2022-09-20.q368; 7661ISACA.CRISC.v2022-05-28.q729

최근 업로드: 116Microsoft.AZ-305-KR.v2026-08-14.q177; 155Microsoft.DP-900-KR.v2026-08-13.q130; 244Microsoft.PL-600.v2026-08-11.q206; 183Microsoft.DP-100.v2026-08-11.q160; 177Oracle.1Z0-1048-25.v2026-08-11.q68; 145ISQI.CTAL-TAE.v2026-08-11.q37; 195ServiceNow.CIS-HR.v2026-08-11.q84; 259Salesforce.Plat-Arch-201.v2026-08-10.q101; 245Databricks.Databricks-Machine-Learning-Professional.v2026-08-10.q76; 192F5.F5CAB2.v2026-08-10.q41