Free CRISC Certification Trivia Questions and Answers

Question 1

Which of the following justifications for keeping key risk indicators (KRIs) is the MOST crucial?

Accepted Answer

Threats and vulnerabilities change over time

Answer

Risk reports need to be timely

Answer

In order to avoid risk

Answer

Complex metrics require fine-tuning

Question 2

You are in charge of an HGT project that just completed the final compilation phase. The project customer has approved the completion of the project, and you only need to complete a few administrative closure tasks. There were a number of significant risks in the project that might have destroyed it, but you and your project team discovered some innovative ways to address the risks without compromising the project's expenses or completion schedule.
What should you do with the risk reactions you discovered throughout the monitoring and controlling procedure for the project?

Accepted Answer

Include the risk responses in the organization's lessons learned database.

Answer

Include the risk responses in the risk management plan.

Answer

Nothing. The risk responses are included in the project's risk register already.

Answer

Include the responses in the project management plan.

Question 3

You are in charge of the GHT project. On your project, you've identified a risk event that, if it materializes, might prevent $100,000 in project expenditures. Which of the following best sums up this risky event?

Accepted Answer

This risk event is an opportunity for the project and should be exploited.

Answer

This risk event should be avoided to take full advantage of the potential savings.

Answer

This risk event should be mitigated to take advantage of the savings.

Answer

This is a risk event that should be accepted because the rewards outweigh the threat to the project.

Question 4

You are in charge of managing a sizable building project. The completion of this project will cost $750,000 and take 18 months. Before the project work starts, you are collaborating with your project team, specialists, and stakeholders to identify project risks. Management is curious as to why you have so many risk identification meetings scheduled throughout the project as opposed to just at the beginning, during project planning.
What makes the duplicate risk identification sessions the most effective?

Accepted Answer

The project manager and the risk identification participants can identify recently found risk events throughout the project thanks to the iterative sessions.

Answer

The iterative meetings give the project manager a chance to discuss impending risks and events as the project is being carried out.

Answer

All stakeholders are able to participate in the risk identification processes throughout the project phases thanks to the iterative meetings.

Answer

The iterative meetings give the project manager a chance to talk about risk events that have come and gone but did not affect the project.

Question 5

Which of the following applications of KRIs is THE MOST crucial?

Accepted Answer

Providing an early warning signal

Answer

Enabling the documentation and analysis of trends

Answer

Providing a backward-looking view on risk events that have occurred

Answer

Providing an indication of the enterprise's risk appetite and tolerance

Question 6

Which of the following role holders will determine the enterprise's Key Risk Indicator?

Accepted Answer

Business leaders

Answer

Human resource

Answer

Chief financial officer

Question 7

What is an illustration of a non-technical control from the list below?

Accepted Answer

Physical security

Answer

Access control

Answer

Encryption

Answer

Intrusion detection system