CRISC Exam Questions and Answers | Exam-Dumps (Page: 24)

QUESTION: 116

Which of the following characteristics of risk controls answers the aspect about the control given below: "Will it continue to function as expressed over the time and adopts as changes or new elements are introduced to the environment"

Reliability
Sustainability
Consistency
Distinct

Answer(s): B

Explanation:

Sustainability ensures that the control continues to function as expressed over the time and adopts as changes or new elements are introduced to the environment.

Incorrect Answers:
A: Reliability of control ensures that it will serve its purpose under multiple circumstances.

C: Consistent characteristic of the control tells whether the control can be applied in the same manner across the organization.

D: A control or countermeasure which does not overlap in its performance with another control or countermeasure is considered as distinct. Hence the separation of controls in the production environment rather than the separation in the design and implementation of the risk refers to distinct.

Reveal Solution Next Question

QUESTION: 117

Jeff works as a Project Manager for www.company.com Inc. He and his team members are involved in the identify risk process. Which of the following tools & techniques will Jeff use in the identify risk process?
Each correct answer represents a complete solution. (Choose three.)

Information gathering technique
Documentation reviews
Checklist analysis
Risk categorization

Answer(s): A,B,C

Explanation:

The various tools & techniques used in the identify risk process are as follows: Documentation reviews
Information gathering technique Checklist analysis
Assumption analysis Diagramming techniques SWOT analysis
Expert judgment

Reveal Solution Next Question

QUESTION: 118

Mary is the project manager for the BLB project. She has instructed the project team to assemble, to review the risks. She has included the schedule management plan as an input for the quantitative risk analysis process. Why is the schedule management plan needed for quantitative risk analysis?

Mary will schedule when the identified risks are likely to happen and affect the project schedule.
Mary will utilize the schedule controls and the nature of the schedule for the quantitative analysis of the schedule.
Mary will use the schedule management plan to schedule the risk identification meetings throughout the remaining project.
Mary will utilize the schedule controls to determine how risks may be allowed to change the project schedule.

Answer(s): B

Explanation:

The controls within the schedule management plan can shape how quantitative risk analysis will be performed on the schedule.
Schedule management plan also describes how the schedule contingencies will be reported and assessed. Incorrect Answers:
A: When risks are likely to happen is important, but it is not the best answer for this question

C: This is not a valid answer for this question throughout the project, but it is not scheduled during the quantitative risk analysis process.

D: Risks may affect the project schedule, but this is not the best answer for the question.

Reveal Solution Next Question

QUESTION: 119

Which of the following control detects problem before it can occur?

Deterrent control
Detective control
Compensation control
Preventative control

Answer(s): D

Explanation:

Preventative controls are the controls that detect the problem before it occurs. They attempt to predict potential problems and make adjustments to prevent those problems to occur in near future. This prediction is being made by monitoring both the system's operations and its inputs.

Incorrect Answers:
A: Deterrent controls are similar to the preventative controls, but they diminish or reverse the attraction of the environment to prevent risk from occurring instead of making adjustments to the environment.

B: Detective controls simply detect and report on the occurrence of a problems. They identify specific symptoms to potential problems.

C: Compensation controls ensure that normal business operations continue by applying appropriate resource.

Reveal Solution Next Question

QUESTION: 120

Which of the following aspects are included in the Internal Environment Framework of COSO ERM? Each correct answer represents a complete solution. Choose three.

Enterprise's integrity and ethical values
Enterprise's working environment
Enterprise's human resource standards
Enterprise's risk appetite

Answer(s): A,C,D

Explanation:

The internal environment for risk management is the foundational level of the COSO ERM framework, which describes the philosophical basics of managing risks within the implementing enterprise. The different aspects of the internal environment include the enterprise's:
Philosophy on risk management Risk appetite
Attitudes of Board of Directors Integrity and ethical values Commitment to competence Organizational structure Authority and responsibility Human resource standards

Reveal Solution Next Question

ISACA CRISC Exam (page: 24) ISACA Certified in Risk and Information Systems Control Updated on: 25-Dec-2025

QUESTION: 116

Explanation:

QUESTION: 117

Explanation:

QUESTION: 118

Explanation:

QUESTION: 119

Explanation:

QUESTION: 120

Explanation:

ISACA CRISC Exam (page: 24)
ISACA Certified in Risk and Information Systems Control
Updated on: 25-Dec-2025