Free Practice Isaca CRISC Exam Questions 2025

Stay ahead with 100% Free Certified in Risk and Information Systems Control CRISC Dumps Practice Questions

Page: 1 / 364

Total 1818 Questions | Updated On: Feb 20, 2025

Add To Cart

Question 1

Which of the following is the MOST likely reason for a significant year-over-year increase in inherent risk?

A : Targeted cyberattacks against the organization's infrastructure

B : A significant number of control failures identified during an audit

C : A lack of defined risk ownership due to organizational changes

D : An ineffective risk action plan validation process

Answer: B

Question 2

You are the project manager of the KJH Project and are working with your project team to plan the risk responses. Consider that your project has a budget of

$500,000 and is expected to last six months. Within the KJH Project you have identified a risk event that has a probability of .70 and has a cost impact of

$350,000. When it comes to creating a risk response for this event what is the risk exposure of the event that must be considered for the cost of the risk response?

A : The risk exposure of the event is $350,000.

B : The risk exposure of the event is $500,000.

C : The risk exposure of the event is $850,000.

D : The risk exposure of the event is $245,000.

Answer: D

Question 3

What is the MOST important information provided by key performance indicators (KPIs) in a risk management program?

A : Effectiveness of internal controls

B : Effectiveness of risk ownership

C : Performance of data loss controls

D : Level of inherent business risk

Answer: A

Question 4

Which of the following is the MOST important aspect to ensure that an accurate risk register is maintained?

A : Publish the risk register in a knowledge management platform with workflow features that periodically contacts and polls risk assessors to ensure accuracy of content

B : Perform regular audits by audit personnel and maintain risk register

C : Submit the risk register to business process owners for review and updating

D : Monitor key risk indicators, and record the findings in the risk register

Answer: A

Question 5

An IT risk profile should be reviewed and updated when a new:

A : risk scenario has been developed.

B : vulnerability assessment tool is implemented.

C : IT asset has been procured.

D : audit finding has been issued.

Answer: A

Page: 1 / 364

Total 1818 Questions | Updated On: Feb 20, 2025

Add To Cart