Get Real CRISC Exam Dumps [Aug-2023] Practice Tests [Q16-Q31]

Q16. You are the project manager for TTP project. You are in the Identify Risks process. You have to create the risk register. Which of the following are included in the risk register?
Each correct answer represents a complete solution. Choose two.

Q17. Which of the following is MOST important to consider before determining a response to a vulnerability?

Q18. To effectively support business decisions, an IT risk register MUST:

Q19. An organization has completed a risk assessment of one of its service providers. Who should be accountable for ensuring that risk responses are implemented?

Q20. An organization is concerned that its employees may be unintentionally disclosing data through the use of social media sites. Which of the following will MOST effectively mitigate tins risk?

Q21. You are the project manager of your enterprise. You have identified several risks. Which of the following responses to risk is considered the MOST appropriate?

Q22. Of the following, who is BEST suited to assist a risk practitioner in developing a relevant set of risk scenarios?

Q23. Walter is the project manager of a large construction project. He’ll be working with several vendors on the project. Vendors will be providing materials and labor for several parts of the project. Some of the works in the project are very dangerous so Walter has implemented safety requirements for all of the vendors and his own project team. Stakeholders for the project have added new requirements, which have caused new risks in the project. A vendor has identified a new risk that could affect the project if it comes into fruition.
Walter agrees with the vendor and has updated the risk register and created potential risk responses to mitigate the risk. What should Walter also update in this scenario considering the risk event?

Q24. A risk owner should be the person accountable for:

Q25. When reviewing management’s IT control self-assessments, a risk practitioner noted an ineffective control that links to several low residual risk scenarios. What should be the NEXT course of action?

Q26. Which of the following criteria associated with key risk indicators (KRIs) BEST enables effective risk monitoring?

Q27. Which of the following is a KEY responsibility of the second line of defense?

Q28. Della works as a project manager for Tech Perfect Inc. She is studying the documentation of planning of a project. The documentation states that there are twenty-eight stakeholders with the project. What will be the number of communication channels for the project?

Q29. In which of the following risk management capability maturity levels risk appetite and tolerance are applied only during episodic risk assessments?

Q30. Which of the following provides the MOST up-to-date information about the effectiveness of an organization’s overall IT control environment?

Q31. An organization has detected unauthorized logins to its client database servers. Which of the following should be of GREATEST concern?