QUESTION 236
Which of the following role carriers will decide the Key Risk Indicator of the enterprise?
Each correct answer represents a part of the solution. Choose two.

QUESTION 237
You are working on a project in an enterprise. Some part of your project requires e-commerce, but your enterprise choose not to engage in e-commerce. This scenario is demonstrating which of the following form?

QUESTION 238
You and your project team are identifying the risks that may exist within your project. Some of the risks are small risks that won’t affect your project much if they happen. What should you do with these identified risk events?

QUESTION 239
Which of the following BEST enables the identification of trends in risk levels?

QUESTION 240
Whose risk tolerance matters MOST when making a risk decision?

QUESTION 241
Which of the following is the MOST important reason to maintain key risk indicators (KRIs)?

QUESTION 242
An organization is planning to engage a cloud-based service provider for some of its data-intensive business processes. Which of the following is MOST important to help define the IT risk associated with this outsourcing activity?

QUESTION 243
You are the project manager of HJT project. Important confidential files of your project are stored on a computer. Keeping the unauthorized access of this computer in mind, you have placed a hidden CCTV in the room, even on having protection password. Which kind of control CCTV is?

QUESTION 244
Which of the following is the MOST important objective of the information system control?

QUESTION 245
Shawn is the project manager of the HWT project. In this project Shawn’s team reports that they have found a way to complete the project work cheaply than what was originally estimated earlier. The project team presents a new software that will help to automate the project work. While the software and the associated training costs $25,000 it will save the project nearly $65,000 in total costs. Shawn agrees to the software and changes the project management plan accordingly. What type of risk response had been used by him?

QUESTION 246
Mitigating technology risk to acceptable levels should be based PRIMARILY upon:

QUESTION 247
Who should be PRIMARILY responsible for establishing an organization’s IT risk culture?

QUESTION 248
A risk practitioner has been asked to advise management on developing a log collection and correlation strategy. Which of the following should be the MOST important consideration when developing this strategy?

QUESTION 249
In which of the following conditions business units tend to point the finger at IT when projects are not delivered on time?

QUESTION 250
It is MOST important to the effectiveness of an IT risk management function that the associated processes are:

QUESTION 251
What are the MOST essential attributes of an effective Key control indicator (KCI)?

QUESTION 252
Which of the following are parts of SWOT Analysis?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 253
Which of the following nodes of the decision tree analysis represents the start point of decision tree?

QUESTION 254
A vulnerability assessment of a vendor-supplied solution has revealed that the software is susceptible to cross-site scripting and SQL injection attacks. Which of the following will BEST mitigate this issue?

QUESTION 255
There are five inputs to the quantitative risk analysis process. Which one of the following is NOT an input to quantitative risk analysis process?

QUESTION 256
Which of the following would prompt changes in key risk indicator (KRI) thresholds?

QUESTION 257
Which of the following is the MOST important objective of embedding risk management practices into the initiation phase of the project management life cycle?