Free Isaca IT-Risk-Fundamentals Exam Questions

Become Isaca Certified with updated IT-Risk-Fundamentals exam questions and correct answers

Page: 1 / 68

Total 336 Questions | Updated On: Sep 23, 2026

Add To Cart

Question 1

Publishing l&T risk-related policies and procedures BEST enables an enterprise to:

A : set the overall expectations for risk management.

B : hold management accountable for risk loss events.

C : ensure regulatory compliance and adherence to risk standards.

Answer: A

Question 2

A risk practitioner has been tasked with analyzing new risk events added to the risk register. Which of the following analysis methods would BEST enable the risk practitioner to minimize ambiguity and subjectivity?

A : Annual loss expectancy (ALE)

B : Delphi method

C : Brainstorming

Answer: A

Question 3

A bottom-up approach to developing I&T risk-related risk scenarios:

A : is a generic method that allows anyone in the organization to develop risk scenarios.

B : is based on hypothetical situations envisioned by people performing specific I&T functions.

C : should not be used in conjunction with other approaches to evaluate I&T related events.

Answer: B

Question 4

Which of the following is an example of an inductive method to gather information?

A : Vulnerability analysis

B : Controls gap analysis

C : Penetration testing

Answer: C

Question 5

Which of the following would be considered a cyber-risk?

A : A system that does not meet the needs of users

B : A change in security technology

C : Unauthorized use of information

Answer: C

Page: 1 / 68

Total 336 Questions | Updated On: Sep 23, 2026

Add To Cart