DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

CRISC Certification Exam Questions & Practice Tests, Certified in Risk and Information Systems Control | SPOTO

Prepare effectively for your CRISC® exams with SPOTO's real practice tests. Our comprehensive resources include mock exams, sample questions, and exam materials to aid in your exam preparation. Access exam dumps and exam answers to reinforce your understanding of key concepts in risk management and information systems control. Utilize our exam simulator for realistic exam practice, allowing you to familiarize yourself with the exam format and improve time management skills. With SPOTO, you'll have the tools you need to crack the CRISC® exams and become a certified risk management professional. Start your exam preparation journey today and gain the skills necessary to optimize risk management across your organization.
Take other online exams
Question #1
Which of the following nodes of the decision tree analysis represents the start point of decision tree?
A. Decision node
B. End node
C. Event node
D. Root node
View answer
Correct Answer: D
Question #2
You are the project manager of GRT project. You discovered that by bringing on more qualified resources or by providing even better quality than originally planned, could result in reducing the amount of time required to complete the project. If your organization seizes this opportunity it would be an example of what risk response?
A. Enhance
B. Exploit
C. Accept
D. Share
View answer
Correct Answer: B
Question #3
You are the project manager for the NHH project. You are working with your project team to examine the project from four different defined perspectives to increase the breadth of identified risks by including internally generated risks. What risk identification approach are you using in this example?
A. Root cause analysis
B. Influence diagramming techniques
C. SWOT analysis
D. Assumptions analysis
View answer
Correct Answer: AB
Question #4
You are the project manager for BlueWell Inc. Your current project is a high priority and high profile project within your organization. You want to identify the project stakeholders that will have the most power in relation to their interest on your project. This will help you plan for project risks, stakeholder management, and ongoing communication with the key stakeholders in your project. In this process of stakeholder analysis, what type of a grid or model should you create based on these conditions?
A. Stakeholder power/interest grid
B. Stakeholder register
C. Influence/impact grid
D. Salience model
View answer
Correct Answer: C
Question #5
Which of the following terms is described in the statement below? "They are the prime monitoring indicators of the enterprise, and are highly relevant and possess a high probability of predicting or indicating important risk. "
A. Key risk indicators
B. Lag indicators
C. Lead indicators
D. Risk indicators
View answer
Correct Answer: B
Question #6
You are preparing to complete the quantitative risk analysis process with your project team and several subject matter experts. You gather the necessary inputs including the project's cost management plan. Why is it necessary to include the project's cost management plan in the preparation for the quantitative risk analysis process? A. The project's cost management plan provides control that may help determine the structure for quantitative analysis of the budget.
B. The project's cost management plan can help you to determine what the total cost of the project is allowed to be
C. The project's cost management plan provides direction on how costs may be changed due to identified risks
D. The project's cost management plan is not an input to the quantitative risk analysis process
View answer
Correct Answer: D
Question #7
In which of the following conditions business units tend to point the finger at IT when projects are not delivered on time?
A. Threat identification in project
B. System failure
C. Misalignment between real risk appetite and translation into policies
D. Existence of a blame culture
View answer
Correct Answer: ABD
Question #8
A part of a project deals with the hardware work. As a project manager, you have decided to hire a company to deal with all hardware work on the project. Which type of risk response is this?
A. Transference
B. Mitigation C
D. Exploit
View answer
Correct Answer: D
Question #9
Which of the following is the MOST effective inhibitor of relevant and efficient communication? A. A false sense of confidence at the top on the degree of actual exposure related to IT and lack of a well-understood direction for risk management from the top down
B. The perception that the enterprise is trying to cover up known risk from stakeholders
C. Existence of a blame culture
D. Misalignment between real risk appetite and translation into policies
View answer
Correct Answer: D
Question #10
You are the project manager of the QPS project. You and your project team have identified a pure risk. You along with the key stakeholders, decided to remove the pure risk from the project by changing the project plan altogether. What is a pure risk?
A. It is a risk event that only has a negative side and not any positive result
C. It is a risk event that is generated due to errors or omission in the project work
D. It is a risk event that cannot be avoided because of the order of the work
View answer
Correct Answer: D
Question #11
You are the project manager of the NGQQ Project for your company. To help you communicate project status to your stakeholders, you are going to create a stakeholder register. All of the following information should be included in the stakeholder register except for which one?
A. Stakeholder management strategy
B. Assessment information of the stakeholders' major requirements, expectations, and potential influence
C. Identification information for each stakeholder
D. Stakeholder classification of their role in the project
View answer
Correct Answer: A
Question #12
Which of the following is the MOST critical security consideration when an enterprise outsource its major part of IT department to a third party whose servers are in foreign company? A. A security breach notification may get delayed due to time difference
B. The enterprise could not be able to monitor the compliance with its internal security and privacy guidelines
C. Laws and regulations of the country of origin may not be enforceable in foreign country
D. Additional network intrusion detection sensors should be installed, resulting in additional cost
View answer
Correct Answer: A
Question #13
In which of the following risk management capability maturity levels does the enterprise takes major business decisions considering the probability of loss and the probability of reward? Each correct answer represents a complete solution. Choose two.
A. Level 0
B. Level 2 C
D. Level 4
View answer
Correct Answer: A
Question #14
You are the project manager of your enterprise. You have identified new threats, and then evaluated the ability of existing controls to mitigate risk associated with new threats. You noticed that the existing control is not efficient in mitigating these new risks. What are the various steps you could take in this case? Each correct answer represents a complete solution. Choose all that apply.
A. Education of staff or business partners
B. Deployment of a threat-specific countermeasure
C. Modify of the technical architecture D
View answer
Correct Answer: B
Question #15
What is the PRIMARY need for effectively assessing controls?
A. Control's alignment with operating environment
B. Control's design effectiveness C
D. Control's operating effectiveness
View answer
Correct Answer: B
Question #16
You are the risk professional in Bluewell Inc. You have identified a risk and want to implement a specific risk mitigation activity. What you should PRIMARILY utilize?
A. Vulnerability assessment report
B. Business case
C. Technical evaluation report
D. Budgetary requirements
View answer
Correct Answer: D
Question #17
Natural disaster is BEST associated to which of the following types of risk?
A. Short-term
B. Long-term
C. Discontinuous
D. Large impact
View answer
Correct Answer: B
Question #18
Which section of the Sarbanes-Oxley Act specifies "Periodic financial reports must be certified by CEO and CFO"?
A. Section 302
B. Section 404
C. Section 203
D. Section 409
View answer
Correct Answer: AD
Question #19
Which is the MOST important parameter while selecting appropriate risk response?
A. Cost of response
B. Capability to implement response
C. Importance of risk
D. Efficiency of response
View answer
Correct Answer: D
Question #20
You are working in an enterprise. You enterprise is willing to accept a certain amount of risk. What is this risk called?
A. Hedging
B. Aversion
C. Appetite
D. Tolerance
View answer
Correct Answer: B
Question #21
How are the potential choices of risk based decisions are represented in decision tree analysis?
A. End node
B. Root node
C. Event node
D. Decision node
View answer
Correct Answer: D
Question #22
Which of the following components ensures that risks are examined for all new proposed change requests in the change control system?
A. Configuration management
B. Scope change control
C. Risk monitoring and control
D. Integrated change control
View answer
Correct Answer: B
Question #23
Which of the following is NOT true for effective risk communication?
A. Risk information must be known and understood by all stakeholders
B. Use of technical terms of risk
C. Any communication on risk must be relevant
D. For each risk, critical moments exist between its origination and its potential business consequence
View answer
Correct Answer: A
Question #24
You are the program manager for your organization and you are working with Alice, a project manager in her program. Alice calls you and insists you to add a change to program scope. You agree for that the change. What must Alice do to move forward with her change request?
A. Add the change to the program scope herself, as she is a project manager
B. Create a change request charter justifying the change request
C. Document the change request in a change request form
D. Add the change request to the scope and complete integrated change control
View answer
Correct Answer: D
Question #25
You are the administrator of your enterprise. Which of the following controls would you use that BEST protects an enterprise from unauthorized individuals gaining access to sensitive information?
A. Monitoring and recording unsuccessful logon attempts
B. Forcing periodic password changes
C. Using a challenge response system
D. Providing access on a need-to-know basis
View answer
Correct Answer: A
Question #26
You are the project manager of your enterprise. You have identified several risks. Which of the following responses to risk is considered the MOST appropriate?
A. Any of the above
B. Insuring
C. Avoiding
D. Accepting
View answer
Correct Answer: A
Question #27
Which of the following is the greatest risk to reporting?
A. Integrity of data
B. Availability of data
C. Confidentiality of data
D. Reliability of data
View answer
Correct Answer: A
Question #28
Which of the following are true for threats? Each correct answer represents a complete solution. Choose three.
A. They can become more imminent as time goes by, or it can diminish
B. They can result in risks from external sources
C. They are possibility D
E. They will arise and stay in place until they are properly dealt
View answer
Correct Answer: C
Question #29
Della works as a project manager for Tech Perfect Inc. She is studying the documentation of planning of a project. The documentation states that there are twenty- eight stakeholders with the project. What will be the number of communication channels for the project?
A. 250
B. 28
C. 378
D. 300
View answer
Correct Answer: D

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.