Free Online ISC2 CGRC Practice Test

Prepare Your ISC2 CGRC Exam Questions with Free online CGRC Practice Test. Get Brilliant Certified in Governance Risk and Compliance Exam Results with Valid CGRC Exam Dumps.

Page: 1 / 79

Total 393 Questions | Updated On: May 15, 2024

Add To Cart

Question 1

Which of the following is true about common controls?

A : Common controls promote more cost-effective and consistent information security across the organization

B : Common controls are easier to implement

C : Common controls are the same as hybrid controls

D : Common controls cannot be implemented in the cloud

Answer: A

Question 2

Which of the following best describes the benefits of using automation to support control assessments in the context of an information security program?

A : Automation completely eliminates the need for manual control assessments and human intervention

B : Automation reduces the time and effort required for control assessments by providing continuous monitoring and real-time reporting

C : Automation ensures that all security controls are implemented flawlessly, with no room for error

D : Automation guarantees that all assessed security controls will receive the highest possible effectiveness rating

Answer: B

Question 3

In the NIST RMF, who is responsible for developing the system security plan and ensuring that the appropriate security controls are selected and implemented?

A : System owner

B : Information security officer

C : Authorizing official

D : Security control assessor

Answer: A

Question 4

Which of the following is NOT a best practice for implementing security controls according to NIST SP 800-53?

A : Implementing security controls in a phased approach

B : Providing security awareness training to personnel

C : Using automated tools to monitor security controls

D : Implementing only those security controls that are required by regulation or policy

Answer: D

Question 5

Your organization is preparing to authorize a new information system. As part of the Prepare phase of the NIST SP 800-37 Risk Management Framework, your team is working to identify the system's stakeholders and their roles. Which of the following stakeholders would be responsible for ensuring that the system's security controls are properly implemented and maintained?

A : The system owner

B : The authorizing official

C : The system administrator

D : The security manager

Answer: C

Page: 1 / 79

Total 393 Questions | Updated On: May 15, 2024

Add To Cart