CRISC試験無料問題集「ISACA Certified in Risk and Information Systems Control 認定」

ページ: 1 / 88
トータル 1575 問
完全版を入手する
Which of the following would be MOST important for a risk practitioner to provide to the internal audit department during the audit planning process?

解説: (GoShiken メンバーにのみ表示されます)
Which of the following would be MOST helpful to an information security management team when allocating resources to mitigate exposures?

解説: (GoShiken メンバーにのみ表示されます)
Which of the following BEST mitigates the risk of sensitive personal data leakage from a software development environment?

解説: (GoShiken メンバーにのみ表示されます)
A risk practitioner is assisting with the preparation of a report on the organization s disaster recovery (DR) capabilities. Which information would have the MOST impact on the overall recovery profile?

解説: (GoShiken メンバーにのみ表示されます)
If preventive controls cannot be Implemented due to technology limitations, which of the following should be done FIRST to reduce risk7

解説: (GoShiken メンバーにのみ表示されます)
Which of the following is the BEST course of action when an organization wants to reduce likelihood in order to reduce a risk level?

解説: (GoShiken メンバーにのみ表示されます)
Which of the following would BEST indicate to senior management that IT processes are improving?

解説: (GoShiken メンバーにのみ表示されます)
Which group has PRIMARY ownership of reputational risk stemming from unethical behavior within the organization?

解説: (GoShiken メンバーにのみ表示されます)
Mitigating technology risk to acceptable levels should be based PRIMARILY upon:

解説: (GoShiken メンバーにのみ表示されます)
Which of the following BEST enables the timely detection of changes in the security control environment?

解説: (GoShiken メンバーにのみ表示されます)
Of the following, who should be responsible for determining the inherent risk rating of an application?

解説: (GoShiken メンバーにのみ表示されます)
An organization's board of directors is concerned about recent data breaches in the news and wants to assess its exposure to similar scenarios. Which of the following is the BEST course of action?

解説: (GoShiken メンバーにのみ表示されます)
The PRIMARY reason for prioritizing risk scenarios is to:

解説: (GoShiken メンバーにのみ表示されます)
From a risk management perspective, the PRIMARY objective of using maturity models is to enable:

解説: (GoShiken メンバーにのみ表示されます)
An organization needs to send files to a business partner to perform a quality control audit on the organization's record-keeping processes. The files include personal information on the organization's customers. Which of the following is the BEST recommendation to mitigate privacy risk?

解説: (GoShiken メンバーにのみ表示されます)
Which of the following is MOST important for a risk practitioner to consider when determining the control requirements for data privacy arising from emerging technologies?

解説: (GoShiken メンバーにのみ表示されます)
Which of the following is the BEST control for a large organization to implement to effectively mitigate risk related to fraudulent transactions?

解説: (GoShiken メンバーにのみ表示されます)
A risk heat map is MOST commonly used as part of an IT risk analysis to facilitate risk:

解説: (GoShiken メンバーにのみ表示されます)
ページ: 1 / 88
トータル 1575 問