Free CRISC sample questions
Real questions from the Certified in Risk and Information Systems Control (CRISC) practice bank, with the correct answer and an explanation for each one. No junk, no filler.
Try them in the simulator Same questions, with study, timed and flashcard modes.
Showing 10 of 20 free sample questions.
Which of the following should be done FIRST when a new risk scenario has been identified?
Which of the following is MOST important to update when an organization’s risk appetite changes?
You are the risk professional of your enterprise. You need to calculate potential revenue loss if a certain risks occurs. Your enterprise has an electronic (e-commerce) web site that is producing US $1 million of revenue each day, then if a denial of service (DoS) attack occurs that lasts half a day creates how much loss?
You work as a Project Manager for Company Inc. You have to conduct the risk management activities for a project. Which of the following inputs will you use in the plan risk management process? Each correct answer represents a complete solution. (Choose three.)
Which of the following is an acceptable method for handling positive project risk?
As part of an overall IT risk management plan, an IT risk register BEST helps management:
Which of the following statements BEST describes policy?
The Identify Risk process determines the risks that affect the project and document their characteristics. Why should the project team members be involved in the Identify Risk process?
Which of the following should be the PRIMARY objective of promoting a risk-aware culture within an organization?
10 more free samples are waiting
Create a free account to unlock the whole CRISC sample bank, or get full access to all 1,093 practice questions in the simulator.