Isaca IT-RISK-FUNDAMENTALS Online Practice Questions and Exam Preparation

Isaca IT-RISK-FUNDAMENTALS Online Questions & Answers

• Question 21:

  A business impact analysis (BIA) generates the MOST benefit when:

  A. keeping impact criteria and cost data as generic as possible.
  B. measuring existing impact criteria exclusively in financial terms.
  C. using standardized frequency and impact metrics.
  C. using standardized frequency and impact metrics.

• Question 22:

  Incomplete or inaccurate data may result in:

  A. availability risk.
  B. relevance risk.
  C. integrity risk.
  C. integrity risk.

• Question 23:

  Which of the following is the MOST useful information to include in a risk report to indicate control effectiveness?

  A. Whether the controls are functioning properly to reduce risk to acceptable levels
  B. Whether metrics to monitor control performance align with risk management standards
  C. Whether external audits confirm the same control deficiencies as reported by internal audit
  A. Whether the controls are functioning properly to reduce risk to acceptable levels

• Question 24:

  Potential losses resulting from employee errors and system failures are examples of:

  A. operational risk.
  B. market risk.
  C. strategic risk.
  A. operational risk.

• Question 25:

  What is the PRIMARY benefit of using generic technology terms in IT risk assessment reports to management?

  A. Simplicity in translating risk reports into other languages
  B. Clarity on the proper interpretation of reported risk
  C. Ease of promoting risk awareness with key stakeholders
  B. Clarity on the proper interpretation of reported risk

• Question 26:

  Detailed risk management reports should be targeted to a specific audience based on:

  A. need to know.
  B. industry benchmarks.
  C. seniority levels in the enterprise.
  A. need to know.

• Question 27:

  Which of the following are control conditions that exist in IT systems and may be exploited by an attacker?

  A. Cybersecurity risk scenarios
  B. Vulnerabilities
  C. Threats
  B. Vulnerabilities

• Question 28:

  Which of the following is the BEST way to minimize potential attack vectors on the enterprise network?

  A. Implement network log monitoring.
  B. Disable any unneeded ports.
  C. Provide annual cybersecurity awareness training.
  B. Disable any unneeded ports.

• Question 29:

  Which of the following risk response strategies involves the implementation of new controls?

  A. Mitigation
  B. Avoidance
  C. Acceptance
  A. Mitigation

• Question 30:

  Organizations monitor control statuses to provide assurance that:

  A. compliance with established standards is achieved.
  B. risk events are being fully mitigated.
  C. return on investment (ROI) objectives are met.
  A. compliance with established standards is achieved.