Control Design and Implementation CRISC Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary difference between an exemption and an exception in control management?

   • AAn exemption is for regulatory requirements, while an exception is for internal policies
   • BAn exemption is granted by the board, while an exception is granted by management
   • CAn exemption is a permanent waiver, while an exception is a temporary deviation
   • DAn exemption applies to all controls, while an exception applies to one control
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A mid-sized company is designing a new control environment for its IT operations and wants to use a widely recognized framework to structure its controls. The company needs a framework that provides a comprehensive set of IT governance and management processes. Which framework is most appropriate?

   • AISO 27001
   • BNIST Cybersecurity Framework
   • CCOBIT
   • DITIL
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary purpose of a control framework such as COBIT, NIST, or ISO 27001?

   • ATo provide a legal requirement for all organizations
   • BTo replace the need for internal audit
   • CTo guarantee that all risks are eliminated
   • DTo provide a structured approach for designing, implementing, and assessing controls
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which of the following is an example of a widely recognized control framework?

   • APMBOK
   • BISO 27001
   • CTOGAF
   • DITIL
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is the primary purpose of prioritizing findings in a risk assessment?

   • ATo satisfy regulatory requirements for reporting
   • BTo focus remediation efforts on the most significant risks first
   • CTo eliminate the need for stakeholder communication
   • DTo ensure all findings are addressed simultaneously
   Reveal Solution Discussion Select an answer first