무료 온라인 액세스 ISACA.CRISC.v2022-11-28.q315 모의 시험 (Page 23)

CRISC 문제 106

it was determined that replication of a critical database used by two business units failed. Which of the following should be of GREATEST concern1?

A. The cost of recovering the data

B. The lack of integrity of data

C. The loss of data confidentiality

D. The underutilization of the replicated Iink

CRISC 문제 107

You are the project manager of a project in Bluewell Inc. You and your project team have identified several project risks, completed risk analysis, and are planning to apply most appropriate risk responses. Which of the following tools would you use to choose the appropriate risk response?

A. Project network diagrams

B. Cause-and-effect analysis

C. Decision tree analysis

D. Delphi Technique

CRISC 문제 108

IT 위험 실무자가 완화 활동이 승인된 위험 조치 계획과 다르다고 결정했습니다.
다음 중 위험 실무자의 최선의 조치는 무엇입니까?

A. 구현된 위험 완화 조치의 적절성을 검증합니다.

B. 관찰 결과를 최고 위험 책임자(CRO)에게 보고합니다.

C. 승인을 받을 때까지 구현된 완화 조치를 되돌립니다.

D. 구현된 위험 완화 조치로 위험 레지스터를 업데이트합니다.

CRISC 문제 109

Which negative risk response usually has a contractual agreement?

A. Sharing

B. Transference

C. Mitigation

D. Exploiting

CRISC 문제 110

Which of the following are sub-categories of threat?
Each correct answer represents a complete solution. Choose three.

A. Natural and supernatural

B. Computer and user

C. Natural and man-made

D. Intentional and accidental

E. External and internal

정답: C,D,E

Section: Volume B
Explanation:
A threat is any event which have the potential to cause a loss. In other word, it is any activity that represents a possible danger. The loss or danger is directly related to one of the following:
* Loss of confidentiality- Someone sees a password or a company's secret formula, this is referred to as loss of confidentiality. Loss of integrity- An e-mail message is modified in transit, a virus infects a file, or someone makes unauthorized changes to a Web site is referred to as loss of integrity.
* Loss of availability- An e-mail server is down and no one has e-mail access, or a file server is down so data files aren't available comes under loss of availability.
Threat identification is the process of creating a list of threats. This list attempts to identify all the possible threats to an organization. The list can be extensive.
Threats are often sub-categorized as under:
* External or internal- External threats are outside the boundary of the organization. They can also be thought of as risks that are outside the control of the organization. While internal threats are within the boundary of the organization. They could be related to employees or other personnel who have access to company resources. Internal threats can be related to any hardware or software controlled by the business.
* Natural or man-made- Natural threats are often related to weather such as hurricanes, tornadoes, and ice storms. Natural disasters like earthquakes and tsunamis are also natural threats. A human or man-made threat is any threat which is caused by a person. Any attempt to harm resources is a man-made threat. Fire could be man-made or natural depending on how the fire is started.
* Intentional or accidental- An attempt to compromise confidentiality, integrity, or availability is intentional.
While employee mistakes or user errors are accidental threats. A faulty application that corrupts data could also be considered accidental.

다른 버전: 2066ISACA.CRISC.v2026-01-07.q193; 2735ISACA.CRISC.v2024-06-22.q668; 7738ISACA.CRISC.v2023-08-10.q988; 4223ISACA.CRISC.v2022-09-20.q368; 7661ISACA.CRISC.v2022-05-28.q729

최근 업로드: 116Microsoft.AZ-305-KR.v2026-08-14.q177; 155Microsoft.DP-900-KR.v2026-08-13.q130; 244Microsoft.PL-600.v2026-08-11.q206; 183Microsoft.DP-100.v2026-08-11.q160; 177Oracle.1Z0-1048-25.v2026-08-11.q68; 145ISQI.CTAL-TAE.v2026-08-11.q37; 195ServiceNow.CIS-HR.v2026-08-11.q84; 259Salesforce.Plat-Arch-201.v2026-08-10.q101; 245Databricks.Databricks-Machine-Learning-Professional.v2026-08-10.q76; 192F5.F5CAB2.v2026-08-10.q41