Free Isaca IT-Risk-Fundamentals Exam Questions

Question 1

When analyzing l&T-related risk, an enterprise defines likelihood and impact on a scale from 1 to 5, and the scale of impact also defines a range expressed in monetary terms. Which of the following risk analysis approaches has been adopted?

A : Qualitative approach

B : Quantitative approach

C : Hybrid approach

Answer: C

Question 2

A risk practitioner has been tasked with analyzing new risk events added to the risk register. Which of the following analysis methods would BEST enable the risk practitioner to minimize ambiguity and subjectivity?

A : Annual loss expectancy (ALE)

B : Delphi method

C : Brainstorming

Answer: A

Question 3

How can metrics on training effectiveness and needs for additional training be gathered?

A : estionnaires, testing, help desk activity, operational errors

B : nagement interviews only

C : dits only

D : cident reporting only

Answer: A

Question 4

Publishing l&T risk-related policies and procedures BEST enables an enterprise to:

A : set the overall expectations for risk management.

B : hold management accountable for risk loss events.

C : ensure regulatory compliance and adherence to risk standards.

Answer: A

Question 5

A risk practitioner has been tasked with analyzing new risk events added to the risk register. Which of the following analysis methods would BEST enable the risk practitioner to minimize ambiguity and subjectivity?

A : Annual loss expectancy (ALE)

B : Delphi method

C : Brainstorming

Answer: A