Free Cram & Latest Exams Dumps

NO.352 Which of the following is the final step in the policy development process?

NO.353 An organization is analyzing the risk of shadow IT usage. Which of the following is the MOST important input into the assessment?

NO.354 After a high-profile systems breach at an organization s key vendor, the vendor has implemented additional mitigating controls. The vendor has voluntarily shared the following set of assessments:
After a high-profile systems breach at an organization s key vendor, the vendor has implemented additional mitigating controls. The vendor has voluntarily shared the following set of assessments:
Which of the assessments provides the MOST reliable input to evaluate residual risk in the vendor’s control environment?

NO.355 Which of the following is MOST helpful in aligning IT risk with business objectives?

NO.356 You are the project manager of GHT project. A risk event has occurred in your project and you have identified it. Which of the following tasks you would do in reaction to risk event occurrence? Each correct answer represents a part of the solution. Choose three.

NO.357 An organization has experienced a cyber attack that exposed customer personally identifiable information (Pll) and caused extended outages of network services. Which of the following stakeholders are MOST important to include in the cyber response team to determine response actions?

NO.358 Which of the following is the first MOST step in the risk assessment process?

NO.359 Which of the following is the MOST effective control to maintain the integrity of system configuration files?

NO.360 Which of the following is NOT the method of Qualitative risk analysis?

NO.361 In an organization where each division manages risk independently, which of the following would BEST enable management of risk at the enterprise level?

NO.362 You are the project manager for your organization. You are preparing for the quantitative risk analysis. Mark, a project team member, wants to know why you need to do quantitative risk analysis when you just completed qualitative risk analysis. Which one of the following statements best defines what quantitative risk analysis is?

NO.363 After identifying new risk events during a project, the project manager’s NEXT step should be to:

NO.364 An organization moved its payroll system to a Software as a Service (SaaS) application. A new data privacy regulation stipulates that data can only be processed within the country where it is collected. Which of the following should be done FIRST when addressing this situation?

NO.365 An organization has engaged a third party to provide an Internet gateway encryption service that protects sensitive data uploaded to a cloud service. This is an example of risk:

NO.366 Which of the following is the PRIMARY factor in determining a recovery time objective (RTO)?

NO.367 Which of the following MUST be assessed before considering risk treatment options for a scenario with significant impact?

NO.368 Which of the following is a detective control?

NO.369 When developing IT risk scenarios, it is MOST important to consider: