ISACA Certified in Risk and Information Systems Control CRISC Exam Questions in PDF

Free ISACA CRISC Dumps Questions (page: 19)

You have been assigned as the Project Manager for a new project that involves development of a new interface for your existing time management system. You have completed identifying all possible risks along with the stakeholders and team and have calculated the probability and impact of these risks. Which of the following would you need next to help you prioritize the risks?

  1. Affinity Diagram
  2. Risk rating rules
  3. Project Network Diagram
  4. Risk categories

Answer(s): B

Explanation:

Risk rating rules define how to prioritize risks after the related probability and impact values are calculated. These are generally included in the organizational process assets and are refined for individual projects.

Incorrect Answers:
A: Affinity Diagram is a method of group creativity technique to collect requirements which allows large numbers of ideas to be sorted into groups for review and analysis. This is generally used in Scope Management and not applicable to this option.

C: A Project Network diagram shows the sequencing and linkage between various project tasks and is not applicable to this question

D: Risk categories are an output of the Perform Qualitative Risk Analysis process and not a tool to complete the process.



You are the project manager of a large networking project. During the execution phase the customer requests for a change in the existing project plan. What will be your immediate action?

  1. Update the risk register.
  2. Ask for a formal change request.
  3. Ignore the request as the project is in the execution phase.
  4. Refuse the change request.

Answer(s): B

Explanation:

Whenever the customer or key stakeholder asks for a change in the existing plan, you should ask him/her to submit a formal change request. Change requests may modify project policies or procedures, project scope, project cost or budget, project schedule, or project quality.

Incorrect Answers:
A, C, D: The first action required is to create a formal change request, if a change is requested in the project.



Which of the following is described by the definition given below? "It is the expected guaranteed value of taking a risk."

  1. Certainty equivalent value
  2. Risk premium
  3. Risk value guarantee
  4. Certain value assurance

Answer(s): A

Explanation:

The Certainty equivalent value is the expected guaranteed value of taking a risk. It is derived by the uncertainty of the situation and the potential value of the situation's outcome.

Incorrect Answers:
B: The risk premium is the difference between the larger expected value of the risk and the smaller certainty equivalent value.

C, D: These are not valid answers.



You are the project manager of GHT project. Your hardware vendor left you a voicemail saying that the delivery of the equipment you have ordered would not arrive on time. She wanted to give you a heads-up and asked that you return the call. Which of the following statements is TRUE?

  1. This is a residual risk.
  2. This is a trigger.
  3. This is a contingency plan.
  4. This is a secondary risk.

Answer(s): B

Explanation:

Triggers are warning signs of an upcoming risk event. Here delay in delivery signifies that there may be a risk event like delay in completion of project. Hence it is referred to as a trigger.

Incorrect Answers:
A: Residual risk is the risk that remains after applying controls. But here in this scenario, risk event has not occurred yet.

C: A contingency plan is a plan devised for a specific situation when things go wrong. Contingency plans are often devised by governments or businesses who want to be prepared for anything that could happen. Here there are no such plans.

D: Secondary risks are risks that come about as a result of implementing a risk response. But here in this scenario, risk event has not occurred yet.



There are five inputs to the quantitative risk analysis process. Which one of the following is NOT an input to quantitative risk analysis process?

  1. Risk management plan
  2. Enterprise environmental factors
  3. Cost management plan
  4. Risk register

Answer(s): B

Explanation:

Enterprise environmental factor is not an input to the quantitative risk analysis process. The five inputs to the perform quantitative risk analysis process are: risk register, risk management plan, cost management plan, schedule management plan, and organizational process assets.

Incorrect Answers:
A, C, D: These are the valid inputs to the perform quantitative risk analysis process.



Share your comments for ISACA CRISC exam with other users:

P
Philippe
1/22/2023 10:24:00 AM

iam impressed with the quality of these dumps. they questions and answers were easy to understand and the xengine app was very helpful to use.

S
Sam
8/31/2023 10:32:00 AM

not bad but you question database from isaca

B
Brijesh kr
6/29/2023 4:07:00 AM

awesome contents

J
JM
12/19/2023 1:22:00 PM

answer to 134 is casb. while data loss prevention is the goal, in order to implement dlp in cloud applications you need to deploy a casb.

N
Neo
7/26/2023 9:36:00 AM

are these brain dumps sufficient enough to go write exam after practicing them? or does one need more material this wont be enough?

B
Bilal
8/22/2023 6:33:00 AM

i did attend the required cources and i need to be sure that i am ready to take the exam, i would ask you please to share the questions, to be sure that i am fit to proceed with taking the exam.

J
John
11/12/2023 8:48:00 PM

why only give explanations on some, and not all questions and their respective answers?

B
Biswa
11/20/2023 8:50:00 AM

refresh db knowledge

S
Shalini Sharma
10/17/2023 8:29:00 AM

interested for sap certification

E
ethan
9/24/2023 12:38:00 PM

could you please upload practice questions for scr exam ?

V
vijay joshi
8/19/2023 3:15:00 AM

please upload free oracle cloud infrastructure 2023 foundations associate exam braindumps

A
Ayodele Talabi
8/25/2023 9:25:00 PM

sweating! they are tricky

R
Romero
3/23/2022 4:20:00 PM

i never use these dumps sites but i had to do it for this exam as it is impossible to pass without using these question dumps.

J
John Kennedy
9/20/2023 3:33:00 AM

good practice and well sites.

N
Nenad
7/12/2022 11:05:00 PM

passed my first exam last week and pass the second exam this morning. thank you sir for all the help and these brian dumps.

L
Lucky
10/31/2023 2:01:00 PM

does anyone who attended exam csa 8.8, can confirm these questions are really coming ? or these are just for practicing?

P
Prateek
9/18/2023 11:13:00 AM

kindly share the dumps

I
Irfan
11/25/2023 1:26:00 AM

very nice content

P
php
6/16/2023 12:49:00 AM

passed today

D
Durga
6/23/2023 1:22:00 AM

hi can you please upload questions

J
JJ
5/28/2023 4:32:00 AM

please upload quetions

N
Norris
1/3/2023 8:06:00 PM

i passed my exam thanks to this braindumps questions. these questions are valid in us and i highly recommend it!

A
abuti
7/21/2023 6:10:00 PM

are they truely latest

C
Curtis Nakawaki
7/5/2023 8:46:00 PM

questions appear contemporary.

V
Vv
12/2/2023 6:31:00 AM

good to prepare in this site

P
praveenkumar
11/20/2023 11:57:00 AM

very helpful to crack first attempt

A
asad Raza
5/15/2023 5:38:00 AM

please upload this exam

R
Reeta
7/17/2023 5:22:00 PM

please upload the c_activate22 dump questions with answer

W
Wong
12/20/2023 11:34:00 AM

q10 - the answer should be a. if its c, the criteria will meet if either the prospect is not part of the suppression lists or if the job title contains vice president

D
david
12/12/2023 12:38:00 PM

this was on the exam as of 1211/2023

T
Tink
7/24/2023 9:23:00 AM

great for prep

J
Jaro
12/18/2023 3:12:00 PM

i think in question 7 the first answer should be power bi portal (not power bi)

9
9eagles
4/7/2023 10:04:00 AM

on question 10 and so far 2 wrong answers as evident in the included reference link.

T
Tai
8/28/2023 5:28:00 AM

wonderful material

AI Tutor 👋 I’m here to help!