ISACA Certified in Risk and Information
Systems Control (CRISC) Certification
Exam Question and Answers
01. Which of the following is the BEST indicator that incident response training is
effective?
a) Decreased reporting of security incidents to the response team
b) Increased reporting of security incidents to the response team
c) Decreased number of password resets
d) Increased number of identified system vulnerabilities -
b) Increased reporting of security incidents to the response team
02. Which of the following factors will have the GREATEST impact on the type of
information security governance model that an enterprise adopts?
a) The number of employees
b) The enterprise's budget
c) The organizational structure
d) The type of technology that the enterprise uses -
c) The organizational structure
03. An enterprise learns of a security breach at another entity using similar network
technology. The MOST important action for a risk practitioner is to:
a) Assess the likelihood of the incident occurring at the risk practitioner's enterprise
b) Discontinue the use of the vulnerable technology
c) Report to senior management that the enterprise is not affected
d) Remind staff that no similar security breaches have taken place -
a) Assess the likelihood of the incident occurring at the risk practitioner's enterprise
04. Which of the following is MOST relevant to include in a cost-benefit analysis of a
two-factor authentication system?
a) The approved budget of the project
b) The frequency of incidents
c) The annual loss expectancy of incidents
d) The total cost of ownership -
d) The total cost of ownership
05. A global financial institution has decided not to take any further action on a denial-
of-service vulnerability found by the risk assessment team. The MOST likely reason for
making this decision is that:
