CRISC無料問題集「ISACA Certified in Risk and Information Systems Control」

質問 1

What should a risk practitioner do FIRST when an assessment reveals a control is not operating as intended?

（A）Discuss the status with the control owner.

（B）Determine the root cause of the control issue.

（C）Recommend compensating controls.

（D）Recommend updates to the control procedures

正解：A 解答を投票する

質問 2

An application development team has a backlog of user requirements for a new system that will process insurance claim payments for customers. Which of the following should be the MOST important consideration for a risk-based review of the user requirements?

（A）Number of claims affected by the user requirements

（B）Level of resources required to implement the user requirements

（C）Number of customers impacted

（D）Impact to the accuracy of claim calculation

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

External penetration tests MUST include:

（A）use of consultants to ensure completeness.

（B）changes to target data to prove the attack was successful.

（C）communications to users of the target systems.

（D）advance approval from system owners.

正解：D 解答を投票する

質問 4

The MOST important measure of the effectiveness of risk management in project implementation is the percentage of projects:

（A）having key risk indicators (KRIs) established to measure risk.

（B）having the risk register updated regularly.

（C）having an action plan to remediate overdue issues.

（D）introduced into production without high-risk issues.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

An organization is planning to implement a Zero Trust model. From a cybersecunty perspective, which of the following is MOST important to ensure successful alignment with the overall inten Zero Trust?

（A）Network compatibility

（B）Industry benchmarks

（C）Access policies

（D）Encryption algorithms

正解：C 解答を投票する

質問 6

Which of the following is the MOST effective way to incorporate stakeholder concerns when developing risk scenarios?

（A）Creating quarterly risk reports

（B）Conducting internal audits

（C）Evaluating risk impact

（D）Establishing key performance indicators (KPIs)

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Which of the following is MOST important for a risk practitioner to update when a software upgrade renders an existing key control ineffective?

（A）Risk profile

（B）Change control documentation

（C）Audit engagement letter

（D）IT risk register

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which of the following would be the MOST critical issue related to the cooling system of a data center?

（A）Inadequate maintenance documentation.

（B）Lack of humidity control.

（C）Expired equipment warranty.

（D）Lack of remote security monitoring.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

When a risk practitioner is determining a system ' s criticality. it is MOST helpful to review the associated:

（A）process flow.

（B）service level agreement (SLA).

（C）system architecture.

（D）business impact analysis (BIA).

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

A business is conducting a proof of concept on a vendor ' s Al technology. Which of the following is the MOST important consideration for managing risk?

（A）Use of a non-production environment

（B）Adequate vendor support

（C）Regular security updates

（D）Third-party management plan

正解：A 解答を投票する

質問 11

A data privacy regulation has been revised to incorporate more stringent requirements for personal data protection. Which of the following provides the MOST important input to help ensure compliance with the revised regulation?

（A）Business impact analysis (BIA)

（B）Risk profile update

（C）Gap analysis

（D）Current control attestation

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

Which of the following should be a risk practitioner ' s NEXT step after learning of an incident that has affected a competitor?

（A）Update the risk register.

（B）Implement compensating controls.

（C）Develop risk scenarios.

（D）Activate the incident response plan.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

CRISC 無料問題集「ISACA Certified in Risk and Information Systems Control」

弊社を連絡する

関連リンク

トップ試験