Operations and Lifecycle Management CRISC Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A software company is using a DevOps model with continuous deployment to production. A recent automated deployment introduced a critical bug that caused a service outage. The rollback procedure was not automated and took 45 minutes to complete manually. Management wants to reduce the risk of future outages. Which improvement would have the MOST significant impact on reducing the impact of similar future events?

   • AAdd more comprehensive testing to the CI/CD pipeline to catch bugs before they reach production.
   • BRequire all deployments to be approved by the change advisory board (CAB) before they are released.
   • CIncrease the frequency of deployments so that smaller changes are released more often.
   • DImplement a fully automated rollback mechanism that can revert to the last known good state in minutes.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which control is specifically designed to prevent unauthorized transmission of sensitive data outside the organization?

   • AAccess controls
   • BData loss prevention (DLP)
   • CFirewalls
   • DEncryption
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A large enterprise has a portfolio of IT projects. The board has set a risk appetite that is 'moderate' for new technology adoption. The portfolio management office (PMO) is evaluating a project that proposes using a cutting-edge, unproven technology. What should the PMO do FIRST?

   • AReject the project because it uses unproven technology and is too risky.
   • BAsk the project sponsor to provide a detailed project plan before any decision is made.
   • CApprove the project because it is innovative and could provide a competitive advantage.
   • DEvaluate the project's risk profile and compare it against the organization's risk appetite before making a decision.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A project manager is overseeing the implementation of a new ERP system. During the execution phase, the project team identifies a significant risk that could delay the go-live date by several weeks. What is the MOST appropriate action for the project manager?

   • AImmediately implement a workaround to keep the project on schedule.
   • BEscalate the risk to the portfolio management office for a decision.
   • CUpdate the risk register and evaluate potential responses with the project team.
   • DInform the stakeholders that the project will be delayed and ask for more budget.
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   An organization is merging with another company. The combined IT asset inventory is incomplete and contains duplicate and outdated records. The risk team is tasked with ensuring the accuracy of the asset inventory to support the merger. What is the MOST effective first step?

   • AMerge the two existing asset databases and remove any obvious duplicates.
   • BConduct a physical and logical discovery scan of the network to identify all connected devices and software.
   • CFocus on classifying the assets that are already known to be critical.
   • DAsk all employees to report their current hardware and software assets via a survey.
   Reveal Solution Discussion Select an answer first