[Full-Version] 2024 New Preparation Guide of ISACA IT-Risk-Fundamentals Exam [Q14-Q28]

NO.14 Which of the following is MOST likely to promote ethical and open communication of risk management activities at the executive level?

NO.15 The MOST important reason to monitor implemented controls is to ensure the controls:

NO.16 As part of the control monitoring process, frequent control exceptions are MOST likely to indicate:

NO.17 Which of the following is of GREATEST concern when aggregating risk information in management reports?

NO.18 Why is risk identification important to an organization?

NO.19 When analyzing l&T-related risk, an enterprise defines likelihood and impact on a scale from 1 to 5, and the scale of impact also defines a range expressed in monetary terms. Which of the following risk analysis approaches has been adopted?

NO.20 An enterprise has performed a risk assessment for the risk associated with the theft of sales team laptops while in transit. The results of the assessment concluded that the cost of mitigating the risk is higher than the potential loss. Which of the following is the BEST risk response strategy?

NO.21 When selecting a key risk indicator (KRI), it is MOST important that the KRI:

NO.22 Which of the following risk analysis methods gathers different types of potential risk ideas to be validated and ranked by an individual or small groups during interviews?

NO.23 A risk practitioner has been asked to prepare a risk report by the end of the day that includes an analysis of the most significant risk events facing the organization. Which of the following would BEST enable the risk practitioner to meet the report deadline?

NO.24 Which type of assessment evaluates the changes in technical or operating environments that could result in adverse consequences to an enterprise?

NO.25 Incomplete or inaccurate data may result in:

NO.26 Which of the following would have the MOST impact on the accuracy and appropriateness of plans associated with business continuity and disaster recovery?

NO.27 An enterprise has moved its data center from a flood-prone area where it had experienced significant service disruptions to one that is not a flood zone. Which risk response strategy has the organization selected?

NO.28 Which of the following is the MAIN objective of governance?