Isaca IT-RISK-FUNDAMENTALS Online Practice Questions and Exam Preparation

Isaca IT-RISK-FUNDAMENTALS Online Questions & Answers

• Question 51:

  For risk reporting to adequately reflect current risk management capabilities, the risk report should be based on the enterprise:

  A. risk management framework.
  B. risk profile.
  C. risk appetite.
  B. risk profile.

• Question 52:

  Which type of assessment evaluates the changes in technical or operating environments that could result in adverse consequences to an enterprise?

  A. Vulnerability assessment
  B. Threat assessment
  C. Control self-assessment
  B. Threat assessment

• Question 53:

  Which of the following is the MAIN reason to conduct a penetration test?

  A. To validate the results of a vulnerability assessment
  B. To validate the results of a control self-assessment
  C. To validate the results of a threat assessment
  A. To validate the results of a vulnerability assessment

• Question 54:

  To address concerns of increased online skimming attacks, an enterprise is training the software development team on secure software development practices. This is an example of which of the following risk response strategies?

  A. Risk acceptance
  B. Risk avoidance
  C. Risk mitigation
  C. Risk mitigation

• Question 55:

  Which of the following occurs earliest in the risk response process?

  A. Developing risk response plans
  B. Prioritizing risk responses
  C. Analyzing risk response options
  C. Analyzing risk response options

• Question 56:

  Which of the following is MOST likely to promote ethical and open communication of risk management activities at the executive level?

  A. Recommending risk tolerance levels to the business
  B. Expressing risk results in financial terms
  C. Increasing the frequency of risk status reports
  B. Expressing risk results in financial terms

• Question 57:

  Which of the following statements on an organization's cybersecurity profile is BEST suited for presentation to management?

  A. The probability of a cyber attack varies between unlikely and very likely.
  B. Risk management believes the likelihood of a cyber attack is not imminent.
  C. Security measures are configured to minimize the risk of a cyber attack.
  C. Security measures are configured to minimize the risk of a cyber attack.

• Question 58:

  Which of the following is a potential risk associated with IT hardware or devices?

  A. Loss of source code
  B. Lack of interoperability
  C. Sniffing attack
  B. Lack of interoperability

• Question 59:

  Which of the following is combined with risk impact to determine the level of risk?

  A. Threat level
  B. Likelihood
  C. Vulnerability score
  B. Likelihood

• Question 60:

  Which of the following is the PRIMARY reason for an organization to monitor and review landT-related risk periodically?

  A. To address changes in external and internal risk factors
  B. To ensure risk is managed within acceptable limits
  C. To facilitate the timely identification and replacement of legacy IT assets
  A. To address changes in external and internal risk factors