Q140. Which of the following findings of a security awareness program assessment would cause the GREATEST concern to a risk practitioner?

Q141. Which of the following are the MOST important risk components that must be communicated among all the stakeholders?
Each correct answer represents a part of the solution. Choose three.

Q142. Which of the following is MOST effective in continuous risk management process improvement?

Q143. Which of following is NOT used for measurement of Critical Success Factors of the project?

Q144. An organization maintains independent departmental risk registers that are not automatically aggregated.
Which of the following is the GREATEST concern?

Q145. Which of the following would BEST help secure online financial transactions from improper users?

Q146. You are the administrator of your enterprise. Which of the following controls would you use that BEST protects an enterprise from unauthorized individuals gaining access to sensitive information?

Q147. Which of the following BEST measures the operational effectiveness of risk management capabilities?

Q148. After a high-profile systems breach at an organization s key vendor, the vendor has implemented additional mitigating controls. The vendor has voluntarily shared the following set of assessments:
After a high-profile systems breach at an organization s key vendor, the vendor has implemented additional mitigating controls. The vendor has voluntarily shared the following set of assessments:
Which of the assessments provides the MOST reliable input to evaluate residual risk in the vendor’s control environment?

Q149. Which key performance efficiency IKPI) BEST measures the effectiveness of an organization’s disaster recovery program?

Q150. Which of the following is MOST important when developing risk scenarios?

Q151. Which of the following is the MOST important consideration when identifying stakeholders to review risk scenarios developed by a risk analyst? The reviewers are:

Q152. IT management has asked for a consolidated view into the organization’s risk profile to enable project prioritization and resource allocation. Which of the following materials would be MOST helpful?

Q153. Which of the following would be MOST helpful to a risk practitioner when ensuring that mitigated risk remains within acceptable limits?

Q154. You are the risk official in Bluewell Inc. You are supposed to prioritize several risks. A risk has a rating for occurrence, severity, and detection as 4, 5, and 6, respectively. What Risk Priority Number (RPN) you would give to it?

Q155. Which of the following BEST measures the impact of business interruptions caused by an IT service outage?

Q156. If preventive controls cannot be implemented due to technology limitations, which of the following should be done FIRST to reduce risk?

Q157. You are the project manager of GFT project. Your project involves the use of electrical motor. It was stated in its specification that if its temperature would increase to 500 degree Fahrenheit the machine will overheat and have to be shut down for 48 hours. If the machine overheats even once it will delay the project’s arrival date. So to prevent this you have decided while creating response that if the temperature of the machine reach 450, the machine will be paused for at least an hour so as to normalize its temperature. This temperature of 450 degree is referred to as?

Q158. Which of the following laws applies to organizations handling health care information?

Q159. A risk manager has determined there is excessive risk with a particular technology. Who is the BEST person to own the unmitigated risk of the technology?