Free ISACA IT-Risk-Fundamentals Exam Dumps Questions & Answers

Which of the following is a valid source or basis for selecting key risk indicators (KRIs)?

• A.  Historical enterprise risk metrics
• B.  External threat reporting services
• C.  Risk workshop brainstorming

Which types of controls are designed to avoid undesirable events, errors, and other adverse occurrences?

• A.  Preventive controls
• B.  Corrective controls
• C.  Detective controls

Which of the following statements on an organization's cybersecurity profile is BEST suited for presentation to management?

• A.  The probability of a cyber attack varies between unlikely and very likely.
• B.  Security measures are configured to minimize the risk of a cyber attack.
• C.  Risk management believes the likelihood of a cyber attack is not imminent.

Of the following, who is BEST suited to be responsible for continuous monitoring of risk?

• A.  Risk analysts
• B.  Chief risk officer (CRO)
• C.  Risk owners

Which of the following is an example of a tangible and assessable representation of risk?

• A.  Risk scenario
• B.  Risk treatment plan
• C.  Enterprise risk policy