Risk Analysis Methodologies CRISC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a typical output of semi-quantitative risk analysis?

   • AA single monetary value for each risk
   • BA risk score calculated by multiplying probability and impact ratings
   • CA probability distribution of annual losses
   • DA list of risks ranked only by qualitative labels
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An insurance company is evaluating the risk of a data breach at its claims processing center. The asset value is $10,000,000, and the exposure factor is 0.3. Historical data indicates a breach occurs once every 10 years. What is the annualized loss expectancy (ALE)?

   • A$1,000,000
   • B$3,000,000
   • C$300,000
   • D$10,000,000
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary characteristic of qualitative risk analysis?

   • AIt assigns numeric scores to risks based on probability and impact
   • BIt relies on subjective judgment and categorical scales such as high, medium, or low
   • CIt uses monetary values to calculate annualized loss expectancy
   • DIt requires extensive historical data and statistical modeling
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A small healthcare clinic is performing its first risk assessment. The risk manager has limited historical data and the staff have varying levels of risk expertise. The clinic needs a quick, cost-effective way to identify and prioritize risks for immediate action. Which risk analysis methodology is most appropriate?

   • AQualitative risk analysis using a likelihood and impact matrix
   • BProbabilistic risk assessment using fault trees
   • CQuantitative risk analysis using Monte Carlo simulation
   • DSemi-quantitative analysis using weighted scores
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How does semi-quantitative risk analysis differ from purely qualitative risk analysis?

   • AIt requires complete historical data for all risks
   • BIt eliminates the need for expert judgment
   • CIt assigns numeric scores to qualitative categories such as probability and impact
   • DIt uses only monetary values to express risk
   Reveal Solution Discussion Select an answer first