Free ISC2 CGRC Exam Questions

Become ISC2 Certified with updated CGRC exam questions and correct answers

Page: 1 / 79

Total 393 Questions | Updated On: Aug 02, 2026

Add To Cart

Question 1

True or False: During control selection, all controls may be specialized with tailoring.

A : TRUE

B : FALSE

Answer: B

Question 2

DEF Corporation is considering the implementation of a new software application. What is the role of security requirements in the SDLC?

A : To ensure that the software application is reliable and performs as intended

B : To identify and mitigate security risks associated with the software application

C : To design the software application and its features

D : To test the software application for defects and errors

Answer: B

Question 3

Which of the following is a key factor in the success of a security awareness and training program?

A : Use of technical jargon and complex language

B : Delivery of training in a one-time, stand-alone format

C : Alignment with organizational goals and culture

D : Restriction of training to high-risk employees only

Answer: C

Question 4

Which of the following factors should be considered when determining residual risk?

A : The cost of implementing additional security controls

B : The likelihood of the identified risks being exploited

C : The personal opinions of the system owners

D : The time it takes to complete the security authorization process

Answer: B

Question 5

True or False: Risk response is the final step in the NIST Risk Management Framework and involves implementing security controls to address identified risks.

A : TRUE

B : FALSE

Answer: B

Page: 1 / 79

Total 393 Questions | Updated On: Aug 02, 2026

Add To Cart