Risk Events CRISC Practice Questions (Page 6)

Questions 26–28

1. 26application · medium

   A government agency is identifying risk events for a new public-facing portal. The project manager wants to leverage the experience of subject matter experts from various departments. Which technique would be most appropriate for this purpose?

   • AStructured interviews with key stakeholders.
   • BBrainstorming with the project team only.
   • CAnalysis of historical data from similar projects.
   • DReview of industry best practices.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A technology startup is conducting its first risk assessment. The risk manager has limited historical data and wants to identify potential risk events that could affect the launch of a new mobile app. The team includes developers, marketers, and customer support staff. Which approach would be most effective for identifying a comprehensive set of risk events?

   • AInterview only the lead developer.
   • BAnalyze data from similar apps in the market.
   • CConduct a brainstorming session with the entire team.
   • DUse a risk checklist from industry standards.
   Reveal Solution Discussion Select an answer first
3. 28foundation · easy

   Which of the following best describes a risk event?

   • AAn occurrence that could have an impact on organizational objectives
   • BA detailed narrative of how a threat might exploit a vulnerability
   • CA condition that increases the likelihood of a loss
   • DThe potential for loss or harm when a threat meets a vulnerability
   Reveal Solution Discussion Select an answer first