Isaca IT-RISK-FUNDAMENTALS Online Practice Questions and Exam Preparation

Isaca IT-RISK-FUNDAMENTALS Online Questions & Answers

• Question 101:

  Which of the following is the BEST reason for an enterprise to avoid an absolute prohibition on risk?

  A. It may not be understood by executive management.
  B. It may lead to ineffective use of resources.
  C. It may not provide adequate support for budget increases.
  B. It may lead to ineffective use of resources.

• Question 102:

  Why is risk identification important to an organization?

  A. It provides a review of previous and likely threats to the enterprise.
  B. It ensures risk is recognized and the impact to business objectives is understood.
  C. It enables the risk register to detail potential impacts to an enterprise's business processes.
  B. It ensures risk is recognized and the impact to business objectives is understood.

• Question 103:

  One of the PRIMARY purposes of threat intelligence is to understand:

  A. zero-day threats.
  B. breach likelihood.
  C. asset vulnerabilities.
  B. breach likelihood.

• Question 104:

  Which of the following provides the MOST important input for analyzing IandT-related risk?

  A. Information about market trends and technology evolution
  B. Information about past incidents, frequency, and loss to the organization
  C. Information about threats and vulnerabilities
  C. Information about threats and vulnerabilities

• Question 105:

  Which of the following would be considered a cyber-risk?

  A. A system that does not meet the needs of users
  B. A change in security technology
  C. Unauthorized use of information
  C. Unauthorized use of information

• Question 106:

  Risk monitoring is MOST effective when it is conducted:

  A. following changes to the business's environment.
  B. before and after completing the risk treatment plan.
  C. throughout the risk treatment planning process.
  C. throughout the risk treatment planning process.

• Question 107:

  When determining the criticality of IandT assets, it is MOST important to identify:

  A. the asset owners who are accountable for asset valuation.
  B. the business processes in which the asset is used to achieve objectives.
  C. the infrastructure in which the asset is processed and stored.
  B. the business processes in which the asset is used to achieve objectives.

• Question 108:

  Which of the following is the MAIN reason to include previously overlooked risk in a risk report?

  A. Assurance is needed that the risk dashboard is complete and comprehensive.
  B. Overlooked or ignored risk may become relevant in the future.
  C. The risk report must contain the current state of all risk.
  A. Assurance is needed that the risk dashboard is complete and comprehensive.

• Question 109:

  Risk analysis makes it easier to communicate impact in terms of:

  A. criticality of IandT assets.
  B. lost productivity.
  C. reputational damage.
  A. criticality of IandT assets.

• Question 110:

  When analyzing landT-related risk, an enterprise defines likelihood and impact on a scale from 1 to 5, and the scale of impact also defines a range expressed in monetary terms. Which of the following risk analysis approaches has been adopted?

  A. Qualitative approach
  B. Quantitative approach
  C. Hybrid approach
  C. Hybrid approach