Q428. Which of the following is MOST critical when designing controls?

Q429. Which of the following criteria is MOST important when developing a response to an attack that would compromise data?

Q430. A department allows multiple users to perform maintenance on a system using a single set of credentials. A risk practitioner determined this practice to be high-risk. Which of the following is the MOST effective way to mitigate this risk?

Q431. Print jobs containing confidential information are sent to a shared network printer located in a secure room. Which of the following is the BEST control to prevent the inappropriate disclosure of confidential information?

Q432. Shawn is the project manager of the HWT project. In this project Shawn’s team reports that they have found a way to complete the project work cheaply than what was originally estimated earlier. The project team presents a new software that will help to automate the project work. While the software and the associated training costs
$25,000 it will save the project nearly $65,000 in total costs. Shawn agrees to the software and changes the project management plan accordingly. What type of risk response had been used by him?

Q433. Which of the following is the BEST approach to use when creating a comprehensive set of IT risk scenarios?

Q434. In addition to the risk register, what should a risk practitioner review to develop an understanding of the organization’s risk profile?

Q435. An IT control gap has been identified in a key process. Who would be the MOST appropriate owner of the risk associated with this gap?

Q436. Who is MOST likely to be responsible for the coordination between the IT risk strategy and the business risk strategy?

Q437. Management has noticed storage costs have increased exponentially over the last 10 years because most users do not delete their emails. Which of the following can BEST alleviate this issue while not sacrificing security?

Q438. Which of the following should be a risk practitioner’s NEXT step upon learning the organization is not in compliance with a specific legal regulation?

Q439. You are the project manager of the NHH Project. You are working with the project team to create a plan to document the procedures to manage risks throughout the project. This document will define how risks will be identified and quantified. It will also define how contingency plans will be implemented by the project team.
What document do you and your team is creating in this scenario?

Q440. Which of the following is the MOST important consideration for a risk practitioner when making a system implementation go-live recommendation?

Q441. Which of the following BEST mitigates the risk of sensitive personal data leakage from a software development environment?

Q442. A bank recently incorporated Blockchain technology with the potential to impact known risk within the organization. Which of the following is the risk practitioner’s BEST course of action?

Q443. Which of the following statements is NOT true regarding the risk management plan?

Q444. Which negative risk response usually has a contractual agreement?

Q445. FISMA requires federal agencies to protect IT systems and data. How often should compliance be audited by an external organization?

Q446. Which of the following elements of a risk register is MOST likely to change as a result of change in management’s risk appetite?

Q447. Assessing the probability and consequences of identified risks to the project objectives, assigning a risk score to each risk, and creating a list of prioritized risks describes which of the following processes?