CRISC問題集PDFは最新 [2024年最新] 究極な学習ガイド [Q310-Q331]

質問310、 It is MOST important to the effectiveness of an IT risk management function that the associated processes are:

質問311、 While developing obscure risk scenarios, what are the requirements of the enterprise?
Each correct answer represents a part of the solution. Choose two.

質問312、 The MOST effective approach to prioritize risk scenarios is by:

質問313、 Which of the following is true for Single loss expectancy (SLE), Annual rate of occurrence (ARO), and Annual loss expectancy (ALE)?

質問314、 Which of the following is the MOST important aspect to ensure that an accurate risk register is maintained?

質問315、 Who is accountable for risk treatment?

質問316、 You and your project team are identifying the risks that may exist within your project. Some of the risks are small risks that won’t affect your project much if they happen. What should you do with these identified risk events?

質問317、 In addition to the risk register, what should a risk practitioner review to develop an understanding of the organization’s risk profile?

質問318、 A PRIMARY function of the risk register is to provide supporting information for the development of an organization’s risk:

質問319、 Which of the following is the GREATEST concern when an organization uses a managed security service provider as a firewall administrator?

質問320、 Mary is the project manager for the BLB project. She has instructed the project team to assemble, to review the risks. She has included the schedule management plan as an input for the quantitative risk analysis process. Why is the schedule management plan needed for quantitative risk analysis?

質問321、 Which of the following comes under phases of risk management?

質問322、 While evaluating control costs, management discovers that the annual cost exceeds the annual loss expectancy (ALE) of the risk. This indicates the:

質問323、 An organization has procured a managed hosting service and just discovered the location is likely to be flooded every 20 years. Of the following, who should be notified of this new information FIRST.

質問324、 Which of the following is the BEST control to detect an advanced persistent threat (APT)?

質問325、 What should be PRIMARILY responsible for establishing an organization’s IT risk culture?

質問326、 You are the project manager of GHT project. You have selected appropriate Key Risk Indicators for your project. Now, you need to maintain those Key Risk Indicators. What is the MOST important reason to maintain Key Risk Indicators?

質問327、 You are the project manager of GHT project. Your project team is in the process of identifying project risks on your current project. The team has the option to use all of the following tools and techniques to diagram some of these potential risks EXCEPT for which one?

質問328、 Which of the following are parts of SWOT Analysis?
Each correct answer represents a complete solution. Choose all that apply.

質問329、 Which of the following is the ULTIMATE goal of conducting a privacy impact analysis (PIA)?

質問330、 You are the project manager in your enterprise. You have identified risk that is noticeable failure threatening the success of certain goals of your enterprise. In which of the following levels do this identified risk exists?

質問331、 An organization’s IT infrastructure is running end-of-life software that is not allowed without exception approval. Which of the following would provide the MOST helpful information to justify investing in updated software?