Free Isaca CRISC Exam Questions

Become Isaca Certified with updated CRISC exam questions and correct answers

Page: 1 / 364

Total 1818 Questions | Updated On: Feb 09, 2026

Add To Cart

Question 1

Which of the following is the BEST course of action when an organization wants to reduce likelihood in order to reduce a risk level?

A : plement preventive measures.

B : ansfer the risk.

C : plement detective controls.

D : nitor risk controls.

Answer: A

Question 2

Which of the following MUST be updated to maintain an IT risk register?

A : k appetite

B : k tolerance

C : pected frequency and potential impact

D : terprise-wide IT risk assessment

Answer: C

Question 3

When is the BEST time to identify risk associated with major projects to determine a mitigation plan?

A : oject execution phase

B : oject closing phase

C : oject planning phase

D : oject initiation phase

Answer: C

Question 4

As the sensitivity of the monitoring tool has to be changed, therefore it requires optimization of Key Risk Indicator. The monitoring tool which is giving alerts is itself acting as a risk indicator. Hence to change the sensitivity of the monitoring tool to give alert only for critical situations requires optimization of the KRI.

Incorrect Answers:

A, C, D: These options are not relevant to the change of sensitivity of the monitoring tools.

A : ceptance

B : ansference

C : hance

D : tigation

Answer: A

Question 5

An organization moved one of its applications to a public cloud, but after migration decided to move it back on-premise after an issue caused the application to be down for one day. What does this scenario indicate?

A : The organization has high risk tolerance.

B : The organization has low risk tolerance.

C : The organization has high risk appetite.

D : The organization has low risk appetite.

Answer: B

Page: 1 / 364

Total 1818 Questions | Updated On: Feb 09, 2026

Add To Cart