Isaca IT-RISK-FUNDAMENTALS Online Practice Questions and Exam Preparation

Isaca IT-RISK-FUNDAMENTALS Online Questions & Answers

• Question 111:

  Publishing landT risk-related policies and procedures BEST enables an enterprise to:

  A. set the overall expectations for risk management.
  B. hold management accountable for risk loss events.
  C. ensure regulatory compliance and adherence to risk standards.
  A. set the overall expectations for risk management.

• Question 112:

  The use of risk scenarios to guide senior management through a rapidly changing market environment is considered a key risk management

  A. benefit.
  B. incentive.
  C. capability.
  A. benefit.

• Question 113:

  Applying statistical analysis methods to IandT risk scenarios is MOST appropriate when:

  A. quantifiable historical data is available for detailed reviews.
  B. risk management professionals are unfamiliar with qualitative methods.
  C. members of senior management have advanced mathematical knowledge.
  A. quantifiable historical data is available for detailed reviews.

• Question 114:

  Which of the following is used to estimate the frequency and magnitude of a given risk scenario?

  A. Risk analysis
  B. Risk register
  C. Risk governance
  A. Risk analysis

• Question 115:

  A bottom-up approach to developing IandT risk-related risk scenarios:

  A. is a generic method that allows anyone in the organization to develop risk scenarios.
  B. is based on hypothetical situations envisioned by people performing specific IandT functions.
  C. should not be used in conjunction with other approaches to evaluate IandT related events.
  B. is based on hypothetical situations envisioned by people performing specific IandT functions.

• Question 116:

  Which of the following would have the MOST impact on the accuracy and appropriateness of plans associated with business continuity and disaster recovery?

  A. Material updates to the incident response plan
  B. Data backups being moved to the cloud
  C. Changes to the business impact assessment (BIA)
  C. Changes to the business impact assessment (BIA)

• Question 117:

  When selecting a key risk indicator (KRI), it is MOST important that the KRI:

  A. supports established KPIs.
  B. produces multiple and varied results.
  C. is a reliable predictor of the risk event.
  C. is a reliable predictor of the risk event.

• Question 118:

  Which of the following is the MOST likely reason to perform a qualitative risk analysis?

  A. To gain a low-cost understanding of business unit dependencies and interactions
  B. To aggregate risk in a meaningful way for a comprehensive view of enterprise risk
  C. To map the value of benefits that can be directly compared to the cost of a risk response
  A. To gain a low-cost understanding of business unit dependencies and interactions