ISACA CRISC Exam (page: 38)
ISACA Certified in Risk and Information Systems Control
Updated on: 25-Dec-2025

Viewing Page 38 of 361

Beth is a project team member on the JHG Project. Beth has added extra features to the project and this has introduced new risks to the project work. The project manager of the JHG project elects to remove the features Beth has added. The process of removing the extra features to remove the risks is called what?

  1. Detective control
  2. Preventive control
  3. Corrective control
  4. Scope creep

Answer(s): C



You are the project manager of the GHT project. This project will last for 18 months and has a project budget of $567,000. Robert, one of your stakeholders, has introduced a scope change request that will likely have an impact on the project costs and schedule. Robert assures you that he will pay for the extra time and costs associated with the risk event. You have identified that change request may also affect other areas of the project other than just time and cost. What project management component is responsible for evaluating a change request and its impact on all of the project management knowledge areas?

  1. Configuration management
  2. Integrated change control
  3. Risk analysis
  4. Project change control system

Answer(s): B

Explanation:

Integrated change control is responsible for evaluating a proposed change and determining its impact on all areas of the project: scope, time, cost, quality, human resources, communication, risk, and procurement.

Incorrect Answers:
A: Configuration management defines the management, control, and documentation of the features and functions of the project's product.

C: Risk analysis is not responsible for reviewing the change aspects for the entire project.

D: The project change control system defines the workflow and approval process for proposed changes to the project scope, time, cost, and contracts.



While developing obscure risk scenarios, what are the requirements of the enterprise? Each correct answer represents a part of the solution. Choose two.

  1. Have capability to cure the risk events
  2. Have capability to recognize an observed event as something wrong
  3. Have sufficient number of analyst
  4. Be in a position that it can observe anything going wrong

Answer(s): B,D

Explanation:

The enterprise must consider risk that has not yet occurred and should develop scenarios around unlikely, obscure or non-historical events.

Such scenarios can be developed by considering two things: Visibility
Recognition
For the fulfillment of this task enterprise must:
Be in a position that it can observe anything going wrong
Have the capability to recognize an observed event as something wrong

Incorrect Answers:
A, C: These are not the direct requirements for developing obscure risk scenarios, like curing risk events comes under process of risk management. Hence capability of curing risk event does not lay any impact on the process of development of risk scenarios.



You are the project manager of GHT project. During the data extraction process, you evaluated the total number of transactions per year by multiplying the monthly average by twelve. This process of evaluating total number of transactions is known as?

  1. Duplicates test
  2. Controls total
  3. Simplistic and ineffective
  4. Reasonableness test

Answer(s): D

Explanation:

Reasonableness tests make certain assumptions about the information as the basis for more elaborate data validation tests.

Incorrect Answers:
A: The duplicate test does not identify duplicate transactions; rather it identifies and confirms the validity of duplicates.

B: The control total test does not ensure that all transactions have been extracted, but only ensures that the data are complete.

C: As compared to simplistic, the reasonableness test is a valid foundation for more elaborate data validation tests.



You are the project manager of the KJH Project and are working with your project team to plan the risk responses. Consider that your project has a budget of $500,000 and is expected to last six months. Within the KJH Project you have identified a risk event that has a probability of .70 and has a cost impact of $350,000.

When it comes to creating a risk response for this event what is the risk exposure of the event that must be considered for the cost of the risk response?

  1. The risk exposure of the event is $350,000.
  2. The risk exposure of the event is $500,000.
  3. The risk exposure of the event is $850,000.
  4. The risk exposure of the event is $245,000.

Answer(s): D

Explanation:

The risk exposure for this event is found by multiplying the risk impact by the risk probability.
Risk Exposure is a straightforward estimate that gives a numeric value to a risk, enabling different risks to be compared.

Risk Exposure of any given risk = Probability of risk occurring x impact of risk event
= 0.70 * 350,000
= 245,000

Incorrect Answers:
A: $350,000 is the impact of the risk event. B: $500,000 is the project's budget.
C: $850,000 is the project's budget and the risk's impact.



Viewing Page 38 of 361



Share your comments for ISACA CRISC exam with other users:

hello 10/31/2023 12:07:00 PM

good content
Anonymous


Matheus 9/3/2023 2:14:00 PM

just testing if the comments are real
UNITED STATES


yenvti2@gmail.com 8/12/2023 7:56:00 PM

very helpful for exam preparation
Anonymous


Miguel 10/5/2023 12:16:00 PM

question 11: https://help.salesforce.com/s/articleview?id=sf.admin_lead_to_patient_setup_overview.htm&type=5
SPAIN


Noushin 11/28/2023 4:52:00 PM

i think the answer to question 42 is b not c
CANADA


susan sandivore 8/28/2023 1:00:00 AM

thanks for the dump
Anonymous


Aderonke 10/31/2023 12:51:00 AM

fantastic assessments
Anonymous


Priscila 7/22/2022 9:59:00 AM

i find the xengine test engine simulator to be more fun than reading from pdf.
GERMANY


suresh 12/16/2023 10:54:00 PM

nice document
Anonymous


Wali 6/4/2023 10:07:00 PM

thank you for making the questions and answers intractive and selectable.
UNITED STATES


Nawaz 7/18/2023 1:10:00 AM

answers are correct?
UNITED STATES


das 6/23/2023 7:57:00 AM

can i belive this dump
INDIA


Sanjay 10/15/2023 1:34:00 PM

great site to practice for sitecore exam
INDIA


jaya 12/17/2023 8:36:00 AM

good for students
UNITED STATES


Bsmaind 8/20/2023 9:23:00 AM

nice practice dumps
Anonymous


kumar 11/15/2023 11:24:00 AM

nokia 4a0-114 dumps
Anonymous


Vetri 10/3/2023 12:59:00 AM

great content and wonderful to have the answers with explanation
UNITED STATES


Ranjith 8/21/2023 3:39:00 PM

for question #118, the answer is option c. the screen shot is showing the drop down, but the answer is marked incorrectly please update . thanks for sharing such nice questions.
Anonymous


Eduardo Ramírez 12/11/2023 9:55:00 PM

the correct answer for the question 29 is d.
Anonymous


Dass 11/2/2023 7:43:00 AM

question no 22: correct answers: bc, 1 per session 1 per page 1 per component always
UNITED STATES


Reddy 12/14/2023 2:42:00 AM

these are pretty useful
Anonymous


Daisy Delgado 1/9/2023 1:05:00 PM

awesome
UNITED STATES


Atif 6/13/2023 4:09:00 AM

yes please upload
UNITED STATES


Xunil 6/12/2023 3:04:00 PM

great job whoever put this together, for the greater good! thanks!
Anonymous


Lakshmi 10/2/2023 5:26:00 AM

just started to view all questions for the exam
NETHERLANDS


rani 1/19/2024 11:52:00 AM

helpful material
Anonymous


Greg 11/16/2023 6:59:00 AM

hope for the best
UNITED STATES


hi 10/5/2023 4:00:00 AM

will post exam has finished
UNITED STATES


Vmotu 8/24/2023 11:14:00 AM

really correct and good analyze!
AZERBAIJAN


hicham 5/30/2023 8:57:00 AM

excellent thanks a lot
FRANCE


Suman C 7/7/2023 8:13:00 AM

will post once pass the cka exam
INDIA


Ram 11/3/2023 5:10:00 AM

good content
Anonymous


Nagendra Pedipina 7/13/2023 2:12:00 AM

q:32 answer has to be option c
INDIA


Tamer Barakat 12/7/2023 5:17:00 PM

nice questions
Anonymous