IT-Risk-Fundamentals 試験問題を無料オンラインアクセス

Which of the following is MOST important when defining an organization's risk scope?

• A.Developing requirements for risk reporting to executive management
• B.Developing a top-down approach to risk management
• C.Understanding the impacts of the risk environment to the organization

Which of the following is the PRIMARY outcome of a risk scoping activity?

• A.Identification of major risk factors to be benchmarked against industry competitors
• B.Identification of risk scenarios related to emerging technologies
• C.Identification of potential high-impact risk areas throughout the enterprise

Which of the following is an example of a preventive control?

• A.File integrity monitoring (FIM) on personal database stores
• B.Air conditioning systems with excess capacity to permit failure of certain components
• C.Data management checks on sensitive data processing procedures

A business continuity plan (BCP) is:

• A.a methodical plan detailing the steps of incident response activities.
• B.a document of controls that reduce the risk of losing critical processes.
• C.a risk-related document that focuses on business impact assessments (BIAs).

A key risk indicator (KRI) is PRIMARILY used for which of the following purposes?

• A.Predicting risk events
• B.Optimizing risk management
• C.Facilitating dashboard reporting