السؤال #1

There are five inputs to the quantitative risk analysis process. Which one of the following is NOT an input to quantitative risk analysis process? A. Risk management plan

B. Enterprise environmental factors

C. Cost management plan

D. Risk register

عرض الإجابة

اجابة صحيحة: B

السؤال #2

FISMA requires federal agencies to protect IT systems and data. How often should compliance be audited by an external organization?

A. Annually

B. Quarterly

C. Every three years

D. Never

عرض الإجابة

اجابة صحيحة: C

السؤال #3

Which of the following processes is described in the statement below? "It is the process of exchanging information and views about risks among stakeholders, such as groups, individuals, and institutions."

A. Risk governance

B. Risk identification

C. Risk response planning

D. Risk communication

عرض الإجابة

اجابة صحيحة: D

السؤال #4

You are the project manager of GHT project. During the data extraction process you evaluated the total number of transactions per year by multiplying the monthly average by twelve. This process of evaluating total number of transactions is known as?

A. Duplicates test

B. Controls total

C. Simplistic and ineffective

D. Reasonableness test

عرض الإجابة

اجابة صحيحة: D

السؤال #5

According to the Section-302 of the Sarbanes-Oxley Act of 2002, what does certification of reports implies? Each correct answer represents a complete solution. Choose three.

A. The signing officer has evaluated the effectiveness of the issuer's internal controls as of a date at the time to report

C. The signing officer has reviewed the report

D. The signing officer has presented in the report their conclusions about the effectiveness of their internal controls based on their evaluation as of that date

عرض الإجابة

اجابة صحيحة: C

السؤال #6

Which of the following is true for Single loss expectancy (SLE), Annual rate of occurrence (ARO), and Annual loss expectancy (ALE)? A. ALE= ARO/SLE

B. ARO= SLE/ALE

C. ARO= ALE*SLE

D. ALE= ARO*SLE

عرض الإجابة

اجابة صحيحة: A

السؤال #7

Which of the following characteristics of risk controls can be defined as under? "The separation of controls in the production environment rather than the separation in the design and implementation of the risk" A. Trusted source

B. Secure

C. Distinct

D. Independent

عرض الإجابة

اجابة صحيحة: A

السؤال #8

Which of the following is the process of numerically analyzing the effects of identified risks on the overall enterprise's objectives? A. Identifying Risks

B. Quantitative Risk Assessment

C. Qualitative Risk Assessment

D. Monitoring and Controlling Risks

عرض الإجابة

اجابة صحيحة: A

السؤال #9

Which of the following steps ensure effective communication of the risk analysis results to relevant stakeholders? Each correct answer represents a complete solution. Choose three.

A. The results should be reported in terms and formats that are useful to support business decisions B

C. Communicate the negative impacts of the events only, it needs more consideration

D. Communicate the risk-return context clearly

عرض الإجابة

اجابة صحيحة: B

السؤال #10

Which of the following process ensures that the risk response strategy remains active and that proposed controls are implemented according to schedule?

A. Risk management

B. Risk response integration

C. Risk response implementation

D. Risk response tracking

عرض الإجابة

اجابة صحيحة: ABC

السؤال #11

Which of the following matrices is used to specify risk thresholds?

A. Risk indicator matrix

B. Impact matrix C

D. Probability matrix

عرض الإجابة

اجابة صحيحة: A

السؤال #12

Which of the following is the PRIMARY requirement before choosing Key performance indicators of an enterprise?

A. Determine size and complexity of the enterprise

B. Prioritize various enterprise processes

C. Determine type of market in which the enterprise operates

D. Enterprise must establish its strategic and operational goals

عرض الإجابة

اجابة صحيحة: BD

السؤال #13

Which of the following guidelines should be followed for effective risk management? Each correct answer represents a complete solution. Choose three.

A. Promote and support consistent performance in risk management

B. Promote fair and open communication

C. Focus on enterprise's objective

D. Balance the costs and benefits of managing risk

عرض الإجابة

اجابة صحيحة: AD

السؤال #14

What are the three PRIMARY steps to be taken to initialize the project? Each correct answer represents a complete solution. Choose all that apply.

A. Conduct a feasibility study

B. Define requirements C

D. Plan risk management

عرض الإجابة

اجابة صحيحة: D

السؤال #15

Which of the following are the principles of risk management? Each correct answer represents a complete solution. Choose three.

A. Risk management should be an integral part of the organization

B. Risk management should be a part of decision-making

C. Risk management is the responsibility of executive management

D. Risk management should be transparent and inclusive

عرض الإجابة

اجابة صحيحة: D

السؤال #16

Wendy has identified a risk event in her project that has an impact of $75,000 and a 60 percent chance of happening. Through research, her project team learns that the risk impact can actually be reduced to just $15,000 with only a ten percent chance of occurring. The proposed solution will cost $25,000. Wendy agrees to the $25,000 solution. What type of risk response is this?

A. Mitigation

B. Avoidance C

D. Enhancing

عرض الإجابة

اجابة صحيحة: A

السؤال #17

Harry is the project manager of HDW project. He has identified a risk that could injure project team members. He does not want to accept any risk where someone could become injured on this project so he hires a professional vendor to complete this portion of the project work. What type of risk response is Harry implementing?

A. Transference B

C. Acceptance

D. Avoidance

عرض الإجابة

اجابة صحيحة: A

السؤال #18

Suppose you are working in Techmart Inc. which sells various products through its website. Due to some recent losses, you are trying to identify the most important risks to the Website. Based on feedback from several experts, you have come up with a list. You now want to prioritize these risks. Now in which category you would put the risk concerning the modification of the Website by unauthorized parties.

A. Ping Flooding Attack

B. Web defacing

C. Denial of service attack D

عرض الإجابة

اجابة صحيحة: ACD

السؤال #19

You are the product manager in your enterprise. You have identified that new technologies, products and services are introduced in your enterprise time-to-time. What should be done to prevent the efficiency and effectiveness of controls due to these changes?

A. Receive timely feedback from risk assessments and through key risk indicators, and update controls

B. Add more controls

C. Perform Business Impact Analysis (BIA)

D. Nothing, efficiency and effectiveness of controls are not affected by these changes

عرض الإجابة

اجابة صحيحة: D

السؤال #20

You are the project manager of HGT project. You are in the first phase of the risk response process and are doing following tasks : Communicating risk analysis results Reporting risk management activities and the state of compliance Interpreting independent risk assessment findings Identifying business opportunities Which of the following process are you performing?

A. Articulating risk

B. Mitigating risk C

D. Reporting risk

عرض الإجابة

اجابة صحيحة: A

السؤال #21

You have been assigned as the Project Manager for a new project that involves development of a new interface for your existing time management system. You have completed identifying all possible risks along with the stakeholders and team and have calculated the probability and impact of these risks. Which of the following would you need next to help you prioritize the risks?

A. Affinity Diagram

B. Risk rating rules C

D. Risk categories

عرض الإجابة

اجابة صحيحة: A

السؤال #22

Which of the following is MOST appropriate method to evaluate the potential impact of legal, regulatory, and contractual requirements on business objectives?

A. Communication with business process stakeholders

B. Compliance-oriented business impact analysis

C. Compliance-oriented gap analysis

D. Mapping of compliance requirements to policies and procedures

عرض الإجابة

اجابة صحيحة: A

السؤال #23

You are the project manager of the NKJ Project for your company. The project's success or failure will have a significant impact on your organization's profitability for the coming year. Management has asked you to identify the risk events and communicate the event's probability and impact as early as possible in the project. Management wants to avoid risk events and needs to analyze the cost-benefits of each risk event in this project. What term is assigned to the low-level of stakeholder tolerance in this

A. Mitigation-ready project management

B. Risk avoidance

C. Risk utility function

D. Risk-reward mentality

عرض الإجابة

اجابة صحيحة: A

السؤال #24

You work as a Project Manager for www.company.com Inc. You have to measure the probability, impact, and risk exposure. Then, you have to measure how the selected risk response can affect the probability and impact of the selected risk event. Which of the following tools will help you to accomplish the task?

A. Project network diagrams

B. Delphi technique

C. Decision tree analysis

D. Cause-and-effect diagrams

عرض الإجابة

اجابة صحيحة: CDE

السؤال #25

You are the risk official in Techmart Inc. You are asked to perform risk assessment on the impact of losing a network connectivity for 1 day. Which of the following factors would you include?

A. Aggregate compensation of all affected business users

B. Hourly billing rate charged by the carrier

C. Value that enterprise get on transferring data over the network

D. Financial losses incurred by affected business units

عرض الإجابة

اجابة صحيحة: A

السؤال #26

Which of the following represents lack of adequate controls?

A. Vulnerability

B. Threat

C. Asset

D. Impact

عرض الإجابة

اجابة صحيحة: C

السؤال #27

While developing obscure risk scenarios, what are the requirements of the enterprise? Each correct answer represents a part of the solution. Choose two.

A. Have capability to cure the risk events

B. Have capability to recognize an observed event as something wrong

C. Have sufficient number of analyst

D. Be in a position that it can observe anything going wrong

عرض الإجابة

اجابة صحيحة: ABC

السؤال #28

You are working on a project in an enterprise. Some part of your project requires e- commerce, but your enterprise choose not to engage in e-commerce. This scenario is demonstrating which of the following form?

A. risk avoidance

B. risk treatment

C. risk acceptance

D. risk transfer

عرض الإجابة

اجابة صحيحة: B

السؤال #29

You are working as a project manager in Bluewell Inc.. You are nearing the final stages of project execution and looking towards the final risk monitoring and controlling activities. For your project archives, which one of the following is an output of risk monitoring and control?

A. Qualitative risk analysis

B. Risk audits

C. Quantitative risk analysis

D. Requested changes

عرض الإجابة

اجابة صحيحة: B

السؤال #30

Which of the following techniques examines the degree to which organizational strengths offset threats and opportunities that may serve to overcome weaknesses?

A. SWOT Analysis

B. Delphi

C. Brainstorming

D. Expert Judgment

عرض الإجابة

اجابة صحيحة: A

السؤال #31

You are the risk official of your enterprise. You have just completed risk analysis process. You noticed that the risk level associated with your project is less than risk tolerance level of your enterprise. Which of following is the MOST likely action you should take? A. Apply risk response

B. Update risk register

C. No action

D. Prioritize risk response options

عرض الإجابة

اجابة صحيحة: C

السؤال #32

You are a project manager for your organization and you're working with four of your key stakeholders. One of the stakeholders is confused as to why you're not discussing the current problem in the project during the risk identification meeting. Which one of the following statements best addresses when a project risk actually happens?

A. Project risks are uncertain as to when they will happen

B. Risks can happen at any time in the project

C. Project risks are always in the future

D. Risk triggers are warning signs of when the risks will happen

عرض الإجابة

اجابة صحيحة: A

السؤال #33

You are the project manager of the HGT project in Bluewell Inc. The project has an asset valued at $125,000 and is subjected to an exposure factor of 25 percent. What will be the Single Loss Expectancy of this project?

A. $ 125,025

B. $ 31,250

C. $ 5,000

D. $ 3,125,000

عرض الإجابة

اجابة صحيحة: B

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان