Isaca IT-RISK-FUNDAMENTALS Online Practice Questions and Exam Preparation

Isaca IT-RISK-FUNDAMENTALS Online Questions & Answers

• Question 31:

  How does an enterprise decide how much risk it is willing to take to meet its business objectives?

  A. By conducting research on industry standards for acceptable risk based on similar businesses
  B. By identifying the risk conditions of the business and the impact of the loss if these risks materialize
  C. By surveying business initiatives to determine what risks would cease their operations
  B. By identifying the risk conditions of the business and the impact of the loss if these risks materialize

• Question 32:

  A risk practitioner has been asked to prepare a risk report by the end of the day that includes an analysis of the most significant risk events facing the organization. Which of the following would BEST enable the risk practitioner to meet the report deadline?

  A. Delphi method
  B. Markov analysis
  C. Monte Carlo simulation
  A. Delphi method

• Question 33:

  A key risk indicator (KRI) is PRIMARILY used for which of the following purposes?

  A. Optimizing risk management
  B. Predicting risk events
  C. Facilitating dashboard reporting
  B. Predicting risk events

• Question 34:

  Which of the following is the MAIN advantage of a risk taxonomy?

  A. It enables risk quantification.
  B. It provides a scheme for classifying categories of risk.
  C. It promotes alignment with industry best practices for risk management.
  B. It provides a scheme for classifying categories of risk.

• Question 35:

  Which of the following is MOST important for a risk practitioner to ensure when preparing a risk report?

  A. The risk report should be published for transparency and enterprise risk awareness.
  B. The risk report should be uniform for all stakeholders to ensure consistency.
  C. The risk report should be customized to stakeholder expectations.
  C. The risk report should be customized to stakeholder expectations.

• Question 36:

  Which of the following is MOST important for the determination of IandT-related risk?

  A. The impact on the business services that the IT system supports
  B. The likelihood of occurrence for most relevant risk scenarios
  C. The impact on competitors in the same industry
  A. The impact on the business services that the IT system supports

• Question 37:

  Which of the following is the MOST important aspect of key performance indicators (KPIs)?

  A. KPIs identify underperforming assets that may impact the achievement of operational goals.
  B. KPIs provide inputs for monitoring the usage of IT assets to determine return on investment (ROI).
  C. KPIs aid management in monitoring the organization's IT infrastructure capacity.
  A. KPIs identify underperforming assets that may impact the achievement of operational goals.

• Question 38:

  What is the FIRST step in the risk response process?

  A. Prioritize responses based on impact.
  B. Review risk analysis.
  C. Review risk appetite.
  B. Review risk analysis.

• Question 39:

  Of the following, which stakeholder group is MOST often responsible for risk governance?

  A. Board of directors
  B. Enterprise risk management (ERM)
  C. Business units
  A. Board of directors

• Question 40:

  What is the purpose of a control objective?

  A. To describe the result of protecting an asset for a business process
  B. To describe the risk of loss to an asset
  C. To describe the responsibility of stakeholders to protect assets
  A. To describe the result of protecting an asset for a business process