[2026] ISACA Certified in Risk and Information Systems Control

문제1

An organization has received notification that it is a potential victim of a cybercrime that may have compromised sensitive customer data. What should be The FIRST course of action?

A. Invoke the business continuity plan (BCP).

B. Determine the business impact.

C. Conduct a forensic investigation.

D. Invoke the incident response plan.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제2

A bank recently incorporated Blockchain technology with the potential to impact known risk within the organization. Which of the following is the risk practitioner's BEST course of action?

A. Conduct testing of the control that mitigate the existing risk.

B. Analyze and update control assessments with the new processes.

C. Analyze the risk and update the risk register as needed.

D. Determine whether risk responses are still adequate.

정답: C

문제3

An organization utilizes a global cloud service provider to store corporate data. A newly enacted foreign data privacy law conflicts directly with the enterprise's local data compliance mandates, creating a legal grey area. Which of the following should the risk practitioner recommend as the BEST initial course of action?

A. Conduct a risk assessment and develop mitigation options.

B. Ensure compliance with local legislation because it has a higher priority.

C. Terminate the current cloud contract and migrate to a local cloud provider.

D. Accept the risk because foreign legislation does not apply to the organization.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제4

Which of the following is MOST important for developing effective key risk indicators (KRIs)?

A. Developing in collaboration with internal audit

B. Including input from risk and business unit management

C. Utilizing data and resources internal to the organization

D. Engaging sponsorship by senior management

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제5

An organization has recently been experiencing frequent data corruption incidents. Implementing a file corruption detection tool as a risk response strategy will help to:

A. restore availability

B. address the root cause

C. reduce the likelihood of future events

D. reduce the impact of future events

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제6

The BEST way to determine the likelihood of a system availability risk scenario is by assessing the:

A. strategic plan for business growth.

B. vulnerability scan results of critical systems.

C. availability of fault tolerant software.

D. redundancy of technical infrastructure.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제7

Which of the following is the ULTIMATE goal of conducting a privacy impact analysis (PIA)?

A. To identify gaps in data protection controls

B. To identify personally identifiable information (Pll)

C. To develop a customer notification plan

D. To determine gaps in data identification processes

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제8

Which of the following is the BEST control to minimize the risk associated with scope creep in software development?

A. Business managements review of functional requirements

B. Retention of test data and results for review purposes

C. An established process for project change management

D. Segregation between development, test, and production

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제9

Well-developed, data-driven risk measurements should be:

A. focused on providing a forward-looking view.

B. reported to management the same day data is collected.

C. reflective of the lowest organizational level.

D. a data feed taken directly from operational production systems.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제10

Which of the following should be the PRIMARY concern when changes to firewall rules do not follow change management requirements?

A. Insufficient risk governance

B. Inaccurate documentation

C. Potential audit findings

D. Potential business impact

정답: D

설명: (Fast2test 회원만 볼 수 있음)

ISACA Certified in Risk and Information Systems Control - CRISC무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트