- (Exam Topic 2)
Which of the following would be the BEST justification to invest in the development of a governance, risk, and compliance (GRC) solution?

1. A. Facilitating risk-aware decision making by stakeholders
2. B. Demonstrating management commitment to mitigate risk
3. C. Closing audit findings on a timely basis
4. D. Ensuring compliance to industry standards

Correct Answer: A

- (Exam Topic 2)
A risk assessment has identified increased losses associated with an IT risk scenario. It is MOST important for the risk practitioner to:

1. A. update the risk rating.
2. B. reevaluate inherent risk.
3. C. develop new risk scenarios.
4. D. implement additional controls.

Correct Answer: A

- (Exam Topic 2)
Quantifying the value of a single asset helps the organization to understand the:

1. A. overall effectiveness of risk management
2. B. consequences of risk materializing
3. C. necessity of developing a risk strategy,
4. D. organization s risk threshold.

Correct Answer: B

- (Exam Topic 4)
Which of the following is the PRIMARY reason to engage business unit managers in risk management processes'?

1. A. Improved alignment will technical risk
2. B. Better-informed business decisions
3. C. Enhanced understanding of enterprise architecture (EA)
4. D. Improved business operations efficiency

Correct Answer: C

- (Exam Topic 3)
Which of the following is the BEST method for assessing control effectiveness against technical vulnerabilities that could be exploited to compromise an information system?

1. A. Vulnerability scanning
2. B. Systems log correlation analysis
3. C. Penetration testing
4. D. Monitoring of intrusion detection system (IDS) alerts

Correct Answer: C