Isaca IT-RISK-FUNDAMENTALS Online Practice Questions and Exam Preparation

Isaca IT-RISK-FUNDAMENTALS Online Questions & Answers

• Question 11:

  An landT-related risk assessment enables individuals responsible for risk governance to:

  A. define remediation plans for identified risk factors.
  B. assign proper risk ownership.
  C. identify potential high-risk areas.
  C. identify potential high-risk areas.

• Question 12:

  Which of the following risk analysis methods gathers different types of potential risk ideas to be validated and ranked by an individual or small groups during interviews?

  A. Brainstorming model
  B. Delphi technique
  C. Monte Cado analysis
  B. Delphi technique

• Question 13:

  Which of the following is an example of a tangible and assessable representation of risk?

  A. Enterprise risk policy
  B. Risk treatment plan
  C. Risk scenario
  C. Risk scenario

• Question 14:

  To establish an enterprise risk appetite, an organization should:

  A. normalize risk taxonomy across the organization.
  B. aggregate risk statements for all lines of business.
  C. establish risk tolerance for each business unit.
  C. establish risk tolerance for each business unit.

• Question 15:

  Which of the following is MOST important to ensure when developing key risk indicators (KRIs)?

  A. The KRIs can be added to the risk dashboard report.
  B. KRIs can be applied to multiple risk events.
  C. Each KRI is linked to a specific risk event.
  C. Each KRI is linked to a specific risk event.

• Question 16:

  Which types of controls are designed to avoid undesirable events, errors, and other adverse occurrences?

  A. Corrective controls
  B. Detective controls
  C. Preventive controls
  C. Preventive controls

• Question 17:

  To be effective, risk reporting and communication should provide:

  A. risk reports to each business unit and groups of employees.
  B. the same risk information for each decision-making stakeholder.
  C. stakeholders with concise information focused on key points.
  C. stakeholders with concise information focused on key points.

• Question 18:

  Which of the following provides the BEST input when developing specific, measurable, realistic, and time-bound (SMART) metrics?

  A. Associated business functions or services
  B. Industry best practices
  C. Enterprise risk management strategy
  A. Associated business functions or services

• Question 19:

  An enterprise's risk policy should be aligned with its:

  A. current risk.
  B. risk capacity.
  C. risk appetite.
  C. risk appetite.

• Question 20:

  When defining the risk monitoring process, management should also define the:

  A. penalties for noncompliance.
  B. continuous improvement plan.
  C. exception procedures.
  C. exception procedures.