CA Foundation Business Economics Questions 2023 - Part 32
Fri, 03 Mar 2023
Inspirational journeys
Follow the stories of academics and their research expeditions
CRISC—Certified in Risk and Information Systems Control Certification Questions and answer - Part 10
1. Where are all risks and risk responses documented as the project progresses?
A) Risk management plan
B) Project management plan
C) Risk response plan
D) Risk register
2. A part of a project deals with the hardware work. As a project manager, you have decided to hire a company to deal with all hardware work on the project. Which type of risk response is this?
A) Transference
B) Mitigation
C) Avoidance
D) Exploit
3. John works as a project manager for BlueWell Inc. He is determining which risks can affect the project. Which of the following inputs of the identify risks process is useful in identifying risks associated to the time allowances for the activities or projects as a whole, with a width of the range indicating the degrees of risk?
A) Activity duration estimates
B) Activity cost estimates
C) Risk management plan
D) Schedule management plan
4. Which of the following events refer to loss of integrity?Each correct answer represents a complete solution. Choose three.(Select 3answers)
A) Someone sees company's secret formula
B) Someone makes unauthorized changes to a Web site
C) An e-mail message is modified in transit
D) A virus infects a file
5. Which of the following should be PRIMARILY considered while designing information systems controls?
A) The IT strategic plan
B) The existing IT environment
C) The organizational strategic plan
D) The present IT budget
A) Risk management plan
B) Project management plan
C) Risk response plan
D) Risk register
2. A part of a project deals with the hardware work. As a project manager, you have decided to hire a company to deal with all hardware work on the project. Which type of risk response is this?
A) Transference
B) Mitigation
C) Avoidance
D) Exploit
3. John works as a project manager for BlueWell Inc. He is determining which risks can affect the project. Which of the following inputs of the identify risks process is useful in identifying risks associated to the time allowances for the activities or projects as a whole, with a width of the range indicating the degrees of risk?
A) Activity duration estimates
B) Activity cost estimates
C) Risk management plan
D) Schedule management plan
4. Which of the following events refer to loss of integrity?Each correct answer represents a complete solution. Choose three.(Select 3answers)
A) Someone sees company's secret formula
B) Someone makes unauthorized changes to a Web site
C) An e-mail message is modified in transit
D) A virus infects a file
5. Which of the following should be PRIMARILY considered while designing information systems controls?
A) The IT strategic plan
B) The existing IT environment
C) The organizational strategic plan
D) The present IT budget
1. Right Answer: D
Explanation: All risks, their responses, and other characteristics are documented in the risk register. As the project progresses and the conditions of the risk events change, the risk register should be updated to reflect the risk conditions.Incorrect Answers:A: The risk management plan addresses the project management's approach to risk management, risk identification, analysis, response, and control.B: The project management plan is the overarching plan for the project, not the specifics of the risk responses and risk identification.C: The risk response plan only addresses the planned risk responses for the identified risk events in the risk register.
2. Right Answer: A
Explanation: When you are hiring a third party to own risk, it is known as transference risk response.Risk transfer means that impact of risk is reduced by transferring or otherwise sharing a portion of the risk with an external organization or another internal entity.Transfer of risk can occur in many forms but is most effective when dealing with financial risks. Insurance is one form of risk transfer.Incorrect Answers:B: The act of spending money to reduce a risk probability and impact is known as mitigation.C: When extra activities are introduced into the project to avoid the risk, this is an example of avoidance.D: Exploit is a strategy that may be selected for risks with positive impacts where the organization wishes to ensure that the opportunity is realized.
3. Right Answer: A
Explanation: The activity duration estimates review is valuable in identifying risks associated to the time allowances for the activities or projects as a whole, with a width of the range indicating the degrees of risk.Incorrect Answers:B: The activity cost estimates review is valuable in identifying risks as it provides a quantitative assessment of the expected cost to complete scheduled activities and is expressed as a range, with a width of the range indicating the degrees of risk.C: A Risk management plan is a document arranged by a project manager to estimate the effectiveness, predict risks, and build response plans to mitigate them.It also consists of the risk assessment matrix.D: It describes how the schedule contingencies will be reported and assessed.
4. Right Answer: B,C,D
Explanation: Loss of integrity refers to the following types of losses: An e-mail message is modified in transit A virus infects a file Someone makes unauthorized changes to a Web siteIncorrect Answers:A: Someone sees company's secret formula or password comes under loss of confidentiality.
5. Right Answer: C
Explanation: Review of the enterprise's strategic plan is the first step in designing effective IS controls that would fit the enterprise's long-term plans.Incorrect Answers:A: The IT strategic plan exists to support the enterprise's strategic plan but is not solely considered while designing information system control.B: Review of the existing IT environment is also useful and necessary but is not the first step that needs to be undertaken.D: The present IT budget is just one of the components of the strategic plan.
Explanation: All risks, their responses, and other characteristics are documented in the risk register. As the project progresses and the conditions of the risk events change, the risk register should be updated to reflect the risk conditions.Incorrect Answers:A: The risk management plan addresses the project management's approach to risk management, risk identification, analysis, response, and control.B: The project management plan is the overarching plan for the project, not the specifics of the risk responses and risk identification.C: The risk response plan only addresses the planned risk responses for the identified risk events in the risk register.
2. Right Answer: A
Explanation: When you are hiring a third party to own risk, it is known as transference risk response.Risk transfer means that impact of risk is reduced by transferring or otherwise sharing a portion of the risk with an external organization or another internal entity.Transfer of risk can occur in many forms but is most effective when dealing with financial risks. Insurance is one form of risk transfer.Incorrect Answers:B: The act of spending money to reduce a risk probability and impact is known as mitigation.C: When extra activities are introduced into the project to avoid the risk, this is an example of avoidance.D: Exploit is a strategy that may be selected for risks with positive impacts where the organization wishes to ensure that the opportunity is realized.
3. Right Answer: A
Explanation: The activity duration estimates review is valuable in identifying risks associated to the time allowances for the activities or projects as a whole, with a width of the range indicating the degrees of risk.Incorrect Answers:B: The activity cost estimates review is valuable in identifying risks as it provides a quantitative assessment of the expected cost to complete scheduled activities and is expressed as a range, with a width of the range indicating the degrees of risk.C: A Risk management plan is a document arranged by a project manager to estimate the effectiveness, predict risks, and build response plans to mitigate them.It also consists of the risk assessment matrix.D: It describes how the schedule contingencies will be reported and assessed.
4. Right Answer: B,C,D
Explanation: Loss of integrity refers to the following types of losses: An e-mail message is modified in transit A virus infects a file Someone makes unauthorized changes to a Web siteIncorrect Answers:A: Someone sees company's secret formula or password comes under loss of confidentiality.
5. Right Answer: C
Explanation: Review of the enterprise's strategic plan is the first step in designing effective IS controls that would fit the enterprise's long-term plans.Incorrect Answers:A: The IT strategic plan exists to support the enterprise's strategic plan but is not solely considered while designing information system control.B: Review of the existing IT environment is also useful and necessary but is not the first step that needs to be undertaken.D: The present IT budget is just one of the components of the strategic plan.
Tags:
it certification certified it it exams isaca certification isaca cgeit isaca cisa isaca cism isaca cobit 5 isaca crisc isaca questions practice exams pratice quests risc maangement it management it questions isaca answers isaca practice isaca dumps isaca test test questions questins and answer explanation0 Comments
Categories
Recent posts
CA Foundation Business Economics Questions 2023 - Part 31
Fri, 03 Mar 2023
CA Foundation Business Economics Questions 2023 - Part 30
Fri, 03 Mar 2023
Leave a comment