Risk Scenario Development and Evaluation CRISC Practice Questions (Page 7)

Questions 31–31

1. 31application · medium

   A financial services company is developing risk scenarios for its online banking platform. The risk team wants to create a scenario that describes a specific threat event that could impact customer account data. Which of the following is the most complete and accurate risk scenario definition?

   • ACustomer account data is a critical asset that must be protected from unauthorized access and disclosure.
   • BThe likelihood of a data breach is high because the company has not updated its security patches in six months.
   • CAn external attacker exploits a vulnerability in the web application firewall to gain unauthorized access to customer account data, resulting in a data breach.
   • DThe company should implement multi-factor authentication to reduce the risk of unauthorized access to customer accounts.
   Reveal Solution Discussion Select an answer first