IT-Risk-Fundamentals Practice Test Questions Answers Updated 75 Questions [Q15-Q38]

Rate this post

IT-Risk-Fundamentals Practice Test Questions Answers Updated 75 Questions

IT-Risk-Fundamentals dumps & Isaca Certification Sure Practice with 75 Questions

NEW QUESTION 15
Which of the following is a valid source or basis for selecting key risk indicators (KRIs)?

Historical enterprise risk metrics

Risk workshop brainstorming

External threat reporting services

NEW QUESTION 16
A business continuity plan (BCP) is:

a methodical plan detailing the steps of incident response activities.

a document of controls that reduce the risk of losing critical processes.

a risk-related document that focuses on business impact assessments (BIAs).

NEW QUESTION 17
Organizations monitor control statuses to provide assurance that:

compliance with established standards is achieved.

risk events are being fully mitigated.

return on investment (ROI) objectives are met.

NEW QUESTION 18
One of the PRIMARY purposes of threat intelligence is to understand:

zero-day threats.

breach likelihood.

asset vulnerabilities.

NEW QUESTION 19
An enterprise’s risk policy should be aligned with its:

current risk.

risk capacity.

risk appetite.

NEW QUESTION 20
When should a consistent risk analysis method be used?

When the goal is to produce results that can be compared over time

When the goal is to aggregate risk at the enterprise level

When the goal is to prioritize risk response plans

NEW QUESTION 21
What is the PRIMARY benefit of using generic technology terms in IT risk assessment reports to management?

Simplicity in translating risk reports into other languages

Clarity on the proper interpretation of reported risk

Ease of promoting risk awareness with key stakeholders

NEW QUESTION 22
An enterprise is currently experiencing an unacceptable 8% processing error rate and desires to manage risk by establishing a policy that error rates cannot exceed 5%. In addition, management wants to be alerted when error rates meet or exceed 4%. The enterprise should set a key performance indicator (KPI) metric at which of the following levels?

NEW QUESTION 23
A business impact analysis (BIA) generates the MOST benefit when:

keeping impact criteria and cost data as generic as possible.

measuring existing impact criteria exclusively in financial terms.

using standardized frequency and impact metrics.

NEW QUESTION 24
Which of the following is an example of an inductive method to gather information?

Vulnerability analysis

Controls gap analysis

Penetration testing

NEW QUESTION 25
The use of risk scenarios to guide senior management through a rapidly changing market environment is considered a key risk management

capability.

incentive.

benefit.

NEW QUESTION 26
The MOST important reason for developing and monitoring key risk indicators (KRIs) is that they provide:

measurable metrics for acceptable risk levels.

information about control compliance.

an early warning of possible risk materialization.

NEW QUESTION 27
Which of the following is MOST likely to expose an organization to adverse threats?

Complex enterprise architecture

Improperly configured network devices

Incomplete cybersecurity training records

NEW QUESTION 28
Which of the following is considered an exploit event?

An attacker takes advantage of a vulnerability

Any event that is verified as a security breach

The actual occurrence of an adverse event

NEW QUESTION 29
To establish an enterprise risk appetite, an organization should:

normalize risk taxonomy across the organization.

aggregate risk statements for all lines of business.

establish risk tolerance for each business unit.

NEW QUESTION 30
Which of the following is the PRIMARY concern with vulnerability assessments?

Threat mitigation

Report size

False positives

NEW QUESTION 31
An enterprise has initiated a project to implement a risk-mitigating control. Which of the following would provide senior management with the MOST useful information on the project’s status?

Risk register

Risk heat map

Risk report

NEW QUESTION 32
Potential losses resulting from employee errors and system failures are examples of:

operational risk.

market risk.

strategic risk.

NEW QUESTION 33
Which of the following is the BEST control to prevent unauthorized user access in a remote work environment?

Read-only user privileges

Multi-factor authentication

Monthly user access recertification

NEW QUESTION 34
Risk maps can help to develop common profiles in order to identify which of the following?

Risk that has clearly identified and assigned ownership

Risk remediation activities that have sufficient budget

Risk response activities that can be made more efficient

NEW QUESTION 35
Which of the following occurs earliest in the risk response process?

Developing risk response plans

Prioritizing risk responses

Analyzing risk response options

NEW QUESTION 36
As part of the control monitoring process, frequent control exceptions are MOST likely to indicate:

excessive costs associated with use of a control.

misalignment with business priorities.

high risk appetite throughout the enterprise.

NEW QUESTION 37
In the context of enterprise risk management (ERM), what is the overall role of l&T risk management stakeholders?

Stakeholders set direction and provide support for risk management practices.

Stakeholders are accountable for all risk management activities within an enterprise.

Stakeholders are responsible for protecting enterprise assets to achieve business objectives.

NEW QUESTION 38
Which of the following is the BEST way to minimize potential attack vectors on the enterprise network?

Implement network log monitoring.

Disable any unneeded ports.

Provide annual cybersecurity awareness training.

New IT-Risk-Fundamentals Exam Questions| Real IT-Risk-Fundamentals Dumps: https://www.actualpdf.com/IT-Risk-Fundamentals_exam-dumps.html

Leave a Reply Cancel reply