CRISC exam

Mortality tables are based on what mathematical activity? Each correct answer represents a complete solution. Choose three.A . Normal distributionsB . ProbabilitiesC . ImpactD . SamplingView AnswerAnswer: ABD Explanation: Probability identifies the chances that a particular event will happen under certain circumstances. The variables provided are based on information gathered...

Which of the following are the principles of access controls? Each correct answer represents a complete solution. Choose three.A . ConfidentialityB . AvailabilityC . ReliabilityD . IntegrityView AnswerAnswer: ABD Explanation: The principles of access controls focus on availability, integrity, and confidentiality, as loss or danger is directly related to these...

You are the project manager of a large networking project. During the execution phase the customer requests for a change in the existing project plan. What will be your immediate action?A . Update the risk register.B . Ask for a formal change request.C . Ignore the request as the project...

Which of the following matrices is used to specify risk thresholds?A . Risk indicator matrixB . Impact matrixC . Risk scenario matrixD . Probability matrixView AnswerAnswer: A Explanation: Risk indicators are metrics used to indicate risk thresholds, i.e., it gives indication when a risk level is approaching a high or...

You are the project manager of GHT project. You have identified a risk event on your project that could save $100,000 in project costs if it occurs. Which of the following statements BEST describes this risk event?A . This risk event should be mitigated to take advantage of the savings.B...

You are the risk official of your enterprise. Your enterprise takes important decisions without considering risk credential information and is also unaware of external requirements for risk management and integration with enterprise risk management. In which of the following risk management capability maturity levels does your enterprise exists?A . Level...

What is the process for selecting and implementing measures to impact risk called?A . Risk TreatmentB . ControlC . Risk AssessmentD . Risk ManagementView AnswerAnswer: A Explanation: The process for selecting and implementing measures for impacting risk in the environment is called risk treatment. Incorrect Answers: C: The process of...

You are the project manager of GHT project. Your hardware vendor left you a voicemail saying that the delivery of the equipment you have ordered would not arrive on time. She wanted to give you a heads-up and asked that you return the call. Which of the following statements is...

Which of the following is the priority of data owners when establishing risk mitigation method?A . User entitlement changesB . Platform securityC . Intrusion detectionD . Antivirus controlsView AnswerAnswer: A Explanation: Data owners are responsible for assigning user entitlement changes and approving access to the systems for which they are...

Harry is the project manager of HDW project. He has identified a risk that could injure project team members. He does not want to accept any risk where someone could become injured on this project so he hires a professional vendor to complete this portion of the project work. What...