CRISC 参考資料、CRISC 資格認定試験
君はまだISACA CRISC 参考資料を通じての大きい難度が悩んでいますか？ 君はまだISACA CRISC 参考資料に合格するために寝食を忘れて頑張って復習しますか？ 早くてISACA CRISC 参考資料を通りたいですか？JapanCertを選択しましょう！JapanCertはきみのIT夢に向かって力になりますよ。
JapanCertの助けのもとで君は大量のお金と時間を费やさなくても復楽にISACAのCRISC 参考資料に合格のは大丈夫でしょう。ソフトの問題集はJapanCertが実際問題によって、テストの問題と解答を分析して出来上がりました。JapanCertが提供したISACAのCRISC 参考資料の問題集は真実の試験に緊密な相似性があります。
試験番号：CRISC 対応受験試験科目：「Certified in Risk and Information Systems Control」
最近更新時間：2017-06-16
問題と解答：393
NO.1 You are the risk official in Bluewell Inc. You are supposed to prioritize several risks. A risk has a
rating for occurrence, severity, and detection as 4, 5, and 6, respectively. What Risk Priority Number
(RPN) you would give to it?
A. Explanation:
Steps involving in calculating risk priority number are as follows: Identify potential failure effects
Identify potential causes Establish links between each identified potential cause Identify potential
failure modes Assess severity, occurrence and detection Perform score assessments by using a scale
of 1 -10 (low to high rating) to score these assessments. Compute the RPN for a particular failure
mode as Severity multiplied by occurrence and detection. RPN = Severity * Occurrence * Detection
Hence, RPN = 4 * 5 * 6 = 120
B. 120
C. 30
D. 15
E. 100
Answer: B
CRISC 関連
D, and B are incorrect. These are not RPN for given values of severity, occurrence, and detection.
NO.2 You are the project manager of GHT project. Your project team is in the process of identifying
project risks on your current project. The team has the option to use all of the following tools and
techniques to diagram some of these potential risks EXCEPT for which one?
A. Decision tree diagram
B. Process flowchart
C. Ishikawa diagram
D. Explanation:
Decision tree diagrams are used during the Quantitative risk analysis process and not in risk
identification.
E. Influence diagram
Answer: A,D
CRISC 解答
A, and C are incorrect.
All the these options are diagrammatical techniques used in the Identify risks process.
NO.3 You work as the project manager for Bluewell Inc. Your project has several risks that will affect
several stakeholder requirements. Which project management plan will define who will be available
to share information on the project risks?
A. Stakeholder management strategy
B. Risk Management Plan
C. Communications Management Plan
D. Resource Management Plan
Answer: C
CRISC 合格記
Explanation:
The Communications Management Plan defines, in regard to risk management, who will be available
to share information on risks and responses throughout the project. The Communications
Management Plan aims to define the communication necessities for the project and how the
information will be circulated. The Communications Management Plan sets
the communication structure for the project. This structure provides guidance forcommunication
throughout the project's life and is updated as communication needs change. The Communication
Managements Plan identifies and defines the roles of persons concerned with the project. It
includes a matrix known as the communication matrix to map the communication requirements of
the project.
Answer C is incorrect. The stakeholder management strategy does not address risk
communications.
Answer B is incorrect. The Risk Management Plan defines risk identification, analysis, response,
and monitoring.
Answer A is incorrect. The Resource Management Plan does not define risk communications.
NO.4 Which of the following is the MOST important reason to maintain key risk indicators (KRIs)?
A. Complex metrics require fine-tuning
B. In order to avoid risk
C. Risk reports need to be timely
D. Threats and vulnerabilities change over time
Answer: D
Explanation:
Threats and vulnerabilities change over time and KRI maintenance ensures that KRIs continue to
effectively capture these changes. The risk environment is highly dynamic as the enterprise's internal
and external environments are constantly changing. Therefore, the set of KRIs needs to be changed
over time, so that they can capture the changes in threat and vulnerability.
Answer B is incorrect. While most key risk indicator (KRI) metrics need to be optimized in respect to
their sensitivity, the most important objective of KRI maintenance is to ensure that KRIs continue to
effectively capture the changes in threats and vulnerabilities over time. Hence the most important
reason is that because of change of threat and vulnerability overtime. Answer C is incorrect. Risk
reporting timeliness is a business requirement, but is not a reason for KRI maintenance. Answer A is
incorrect. Risk avoidance is one possible risk response. Risk responses are based on KRI reporting, but
is not the reason for maintenance of KRIs.
JapanCertは最新の210-250問題集と高品質の642-980問題と回答を提供します。JapanCertのC-THR86-1702 VCEテストエンジンと70-698試験ガイドはあなたが一回で試験に合格するのを助けることができます。高品質の70-534 PDFトレーニング教材は、あなたがより迅速かつ簡単に試験に合格することを100％保証します。試験に合格して認証資格を取るのはそのような簡単なことです。
記事のリンク：http://www.japancert.com/CRISC.html
