Download ARM 400 EXAM QUESTIONS & ANSWERS LATEST UPDATED and more Exams Risk Analysis in PDF only on Docsity!
ARM 400 EXAM
QUESTIONS & ANSWERS LATEST UPDATED
The fundamental purpose of a risk management framework is to - Correct Answer Integrate risk
management throughout the organization"
"A corporate board of director's chair person is elected by - Correct Answer The board of directors."
"Metadata contains - Correct Answer Information about data as well as rules about that data"
"Aligning risks with the organization's risk appetite defines - Correct Answer Tolerable uncertainty"
"An organization must meet the standard of care that it owes to others in order to ensure that - Correct
Answer Legal obligations are satisfied"
"Which one of the following statements is true with regard to preventive analytics? - Correct Answer
Preventive analytics uses smart products and data analytics to identify root loss causes and their implications." "Autonomous Vehicle Applications (AVA) is a start-up company that develops safety technologies that can be sold to companies that are producing autonomous vehicles. One technology AVA is developing allows an autonomous vehicle to detect, extract, and analyze images; and then to respond to the images. For example, the technology would detect a presence in a crosswalk, extract the image, and a computer would analyze the image. When the image was determined to be a human being, the vehicle would slow down or stop until the crosswalk was clear. This technology, which is designed to capture
and analyze images, and to act on the recognition of the image; is called - Correct Answer Computer
Vision" "The emerging technologies applied to risk assessment and control link the physical domain to the
virtual domain. Together, these domains linked by the emerging technologies create a - Correct
Answer Connected ecosystem."
"It's not cost effective to use human assets to inspect tracks, bridges, and trestles. Instead, SIR has started to use drones. A drone can fly low over tracks and above/below bridges and trestles. The drones record video that is transmitted to corporate headquarters where it is simultaneously scanned for derailment hazards. In the past six months, the drones detected a track blockage caused by a rock slide and damage to tracks in a remote area cause by an earthquake. SIR dispatched work crews to make the tracks once again passable, and no derailments occurred. SIR's use of drones, video, real-term video
scanning, and computer analysis illustrates which one of the following? - Correct Answer Preventative
analytics" "A municipal water plant installed water flow sensors and water pressure sensors on the water pipes leaving the plant. The sensors make sure water is flowing properly and that there are no leaks or clogs
which could produce a loss. These types of sensors are - Correct Answer Mechanical Sensors"
"Mutual Fund Company (MFC) offers a wide array of mutual fund options to investors. Each mutual fund has a different fund objective and set of investment guidelines that apply to the fund. While MFC gives considerable freedom to its fund portfolio managers, they are required to abide by the fund's investment guidelines. To monitor compliance, MFC developed a computer algorithm. The computer algorithm continuously monitors each fund's compliance with investment guidelines. If a fund manager violates the investment guidelines, the computer immediately notifies MFC's internal control director, and corrective action is taken. MFC's use of the computer algorithm to monitor investment compliance
and to provide notification when corrective action is necessary illustrates use of - Correct Answer
Artificial intelligence." "After opening its third store, Shoehorn Shoes decided to purchase new inventory tracking software for all of its stores. Which one of the following external or internal environments does this decision relate
to? - Correct Answer Operations environment"
"The main advantage of a formal internal communication system is that - Correct Answer Individuals
know to whom to report."
"Which one of the following statements is correct regarding risk owners? - Correct Answer Generally,
the stakeholder who is most affected by or creates a risk should be its risk owner."
"Which one of the following statements is correct regarding an organization's code of ethics? - Correct
Answer The code of ethics should include principles and concepts that are dynamic enough to remain
relevant in a rapidly changing business environment." "Which one of the following is an example of an internal key risk indicator (KRI) that a contractor might
monitor? - Correct Answer Budget variances"
"The business process management (BPM) life cycle incorporates five steps. Which one of the following
best describes the first step in the BPM process? - Correct Answer Processes are designed or
redesigned by considering workflows and affected personnel." "Which of the following statements best describes the risk governance role and responsibility of a
corporate board of directors? - Correct Answer To set the organization's risk appetite and to stay
informed of the most significant risks to the organization and management's responses."
"Which one of the following provides the frame of reference needed so data can be used appropriately
for analysis and decision-making? - Correct Answer Metadata"
"To gain a competitive advantage, maintain profitability, and satisfy customers an organization must -
Correct Answer Be able to trust its data"
"Sound risk management decisions are predicated on - Correct Answer Quality data."
"Encrypting data is an example of - Correct Answer. A data security program."
"An auditor identifies risks under the risk-based approach by - Correct Answer Looking at each
objective and its controls identifying risks by asking, "What might go wrong?"" "Which one of the following is true regarding internal audit involvement with enterprise risk
management (ERM) efforts? - Correct Answer Internal audit is increasingly asked to evaluate
organizational risks, including strategic, financial and hazard risks." "An independent auditor has been given the task of evaluating internal controls at Westside Company (Westside). The auditor has determined that Westside's board of directors has endorsed a framework requiring management to have documented internal reporting controls to ensure efficient operations, accuracy of financial statements, and compliance with regulations. The framework is applied at the entity and divisional levels, but not the operating unit or functional levels. The program is new so it has
not yet been monitored. The auditor is likely to report that - Correct Answer A. The selected method
does not align with the Committee of Sponsoring Organizations of the Treadway Commission's (COSO) Internal Control—Integrated Framework because it must also be applied at the operating unit and functional levels and it must be monitored." "Which one of the following best describes if it is within the scope of duties for an internal auditor to
assist the company's enterprise risk management (ERM) program? - Correct Answer It is within the
scope. Assisting with the management of key risks, including effectiveness of controls lend support to the ERM program." "The Committee of Sponsoring Organizations of the Treadway Commission's (COSO's) Internal Control—
Integrated Framework provides - Correct Answer Common standards designed to increase
effectiveness and efficiency of operations and reliability of financial reporting while ensuring compliance with applicable laws and regulations." "In accordance with the Three Lines of Defense Model, how does risk management act as the second
line of defense? - Correct Answer Risk management supports and monitors operational management's
implementation of risk management practices."
"Which one of the following best describes an effective way to construct internal controls? - Correct
Answer The controls should be linear and create checks and balances."
"Colossal Casualty Insurance Company decided to conduct an internal audit of the company's operations. As part of the internal audit, several fictitious claims were submitted to the claims department to see if the claims would be approved and paid. Which one of the Committee of Sponsoring Organizations of the Treadway Commission's (COSO's) components of internal control was
examined by this internal audit test? - Correct Answer Control environment"
"Many banks are using technology to search for and detect cyber-security threats locally and in the
cloud. This application of technology, in which machines learn from humans, illustrates the use of -
Correct Answer Artificial intelligence."
"Examples of Principles-Based Regulations include all of the following, EXCEPT: - Correct Answer
Restaurant employees must wash their hands every time they use the restroom." "Which one of the following regulatory approaches provides an organization with more certainty and
greater predictability? - Correct Answer Rules Based"
"Company G is a manufacturer of high profile golf equipment. The risk management professional for Company G is concerned about loss of business related to product design. Failing to respond to changing customer demand and preferences in the design of golf clubs could cost Company G significant market
share. Categorized according to the quadrants of risk, this exposure to loss is classified as - Correct
Answer Strategic Risk"
"Which one of the following is an example of a compliance requirement that is internal and mandatory?
- Correct Answer Requiring all employees working in the foundry to wear hearing protection" "Which one of the following is the first step that should be taken by the senior manager who is
responsible for the organization's compliance program? - Correct Answer Assemble a task force from
all major functions within the organization" "The Federal Sentencing Guidelines require a senior manager to have responsibility for the organization's entire compliance program. The individual selected is typically from which one of the
following functions of the organization? - Correct Answer Internal audit"
"All of the following are true regarding the Federal Sentencing Guidelines, EXCEPT: - Correct Answer
They are mandatory" "In many organizations, disaster recovery is considered a function of which one of the following
departments? - Correct Answer Information technology"
"Which one of the following continuity strategy models involves maintaining two or more active sites
that are geographically dispersed? - Correct Answer Split operations model"
