A company allows employees to access corporate email on their personal mobile devices. The risk team is concerned about data leakage if a device is lost or stolen. Which control is MOST effective in protecting the data on these devices?

Provide employees with a data loss prevention (DLP) policy that prohibits storing sensitive data on personal devices.

Ask employees to install a personal firewall on their devices.

Implement mobile device management (MDM) with the ability to remotely wipe the device.

Require a strong password for device unlock.

Which of the following is the PRIMARY purpose of a formal change management process in IT operations?

To minimize the risk of disruption to IT services by ensuring changes are properly authorized, tested, and reversible

To ensure that all changes are approved by senior management before implementation

To document every change for audit purposes

To speed up the implementation of changes to meet business demands

What is the purpose of the archival stage in the data lifecycle?

To delete data that is no longer needed

To share data with external parties

To make data available for real-time processing

To retain data that is no longer actively used but may be needed for compliance or future reference

Certified in Risk and Information Systems Control

Domain 4Objective 2

Operations and Lifecycle Management CRISC Practice Questions (Page 4)

Part of the Domain 4: Technology and Security domain, which accounts for 20% of the CRISC exam.

41questions here

9free pages

12concepts

20%of the exam

Questions 16–20

16foundation · easy
Which DevOps practice involves automatically building and testing code changes whenever they are committed to a shared repository?
Select an answer first
17application · medium
A company allows employees to access corporate email on their personal mobile devices. The risk team is concerned about data leakage if a device is lost or stolen. Which control is MOST effective in protecting the data on these devices?
Select an answer first
18foundation · easy
Which of the following is the PRIMARY purpose of a formal change management process in IT operations?
Select an answer first
19foundation · easy
What is the purpose of the archival stage in the data lifecycle?
Select an answer first
20foundation · easy
In a change management process, which step is typically performed AFTER a change has been implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CRISC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CRISC” is a trademark of its owner, used for identification only.

Operations and Lifecycle Management CRISC Practice Questions (Page 4)

Questions 16–20

Which DevOps practice involves automatically building and testing code changes whenever they are committed to a shared repository?

A company allows employees to access corporate email on their personal mobile devices. The risk team is concerned about data leakage if a device is lost or stolen. Which control is MOST effective in protecting the data on these devices?

Which of the following is the PRIMARY purpose of a formal change management process in IT operations?

What is the purpose of the archival stage in the data lifecycle?

In a change management process, which step is typically performed AFTER a change has been implemented?

Keep studying — Domain 4: Technology and Security