Free ISACA CRISC Übungsprüfungen - Seite 49 von 65

Question #481

Which of the following is the MOST important component of effective security incident response?

A . Network time protocol synchronization
B . Identification of attack sources
C . Early detection of breaches
D . A documented communications plan

Question #482

Which of the following is a KEY consideration for a risk practitioner to communicate to senior management evaluating the introduction of artificial intelligence (Al) solutions into the organization?

A . Al requires entirely new risk management processes.
B . Al potentially introduces new types of risk.
C . Al will result in changes to business processes.
D . Third-party Al solutions increase regulatory obligations.

Lösung einblenden Lösung ausblenden

Question #483

When an organization’s disaster recovery plan (DRP) has a reciprocal agreement, which of the following risk treatment options is being applied?

A . Acceptance
B . Mitigation
C . Transfer
D . Avoidance

Lösung einblenden Lösung ausblenden

Question #484

Which of the following should be the MAIN consideration when validating an organization’s risk appetite?

A . Comparison against regulations
B . Maturity of the risk culture
C . Capacity to withstand loss
D . Cost of risk mitigation options

Lösung einblenden Lösung ausblenden

Question #485

Which of the following scenarios is MOST likely to cause a risk practitioner to request a formal risk acceptance sign-off?

A . Residual risk in excess of the risk appetite cannot be mitigated.
B . Inherent risk is too high, resulting in the cancellation of an initiative.
C . Risk appetite has changed to align with organizational objectives.
D . Residual risk remains at the same level over time without further mitigation.

Lösung einblenden Lösung ausblenden

Question #486

A risk practitioner implemented a process to notify management of emergency changes that may not be approved.

Which of the following is the BEST way to provide this information to management?

A . Change logs
B . Change management meeting minutes
C . Key control indicators (KCIs)
D . Key risk indicators (KRIs)

Lösung einblenden Lösung ausblenden

Question #487

Who is ULTIMATELY accountable for risk treatment?

A . Risk owner
B . Enterprise risk management (ERM)
C . Risk practitioner
D . Control owner

Lösung einblenden Lösung ausblenden

Question #488

An organization is concerned that a change in its market situation may impact the current level of acceptable risk for senior management.

As a result, which of the following is MOST important to reevaluate?

A . Risk classification
B . Risk policy
C . Risk strategy
D . Risk appetite

Lösung einblenden Lösung ausblenden

Question #489

An organization is participating in an industry benchmarking study that involves providing customer transaction records for analysis.

Which of the following is the MOST important control to ensure the privacy of customer information?

A . Nondisclosure agreements (NDAs)
B . Data anonymization
C . Data cleansing
D . Data encryption

Lösung einblenden Lösung ausblenden

Question #490

Which of the following is the BEST method to ensure a terminated employee’s access to IT systems is revoked upon departure from the organization?

A . Login attempts are reconciled to a list of terminated employees.
B . A list of terminated employees is generated for reconciliation against current IT access.
C . A process to remove employee access during the exit interview is implemented.
D . The human resources (HR) system automatically revokes system access.

Lösung einblenden Lösung ausblenden

Richtige Antwort: D
D

Explanation:

The best method to ensure a terminated employee’s access to IT systems is revoked upon departure from the organization is to have the human resources (HR) system automatically revoke system access, which is a process that involves integrating the HR system with the IT system, and triggering the removal of access rights for the employee as soon as the termination is recorded in the HR system12.

This method is the best because it provides the most timely, accurate, and consistent way of revoking access, and reduces the risk of human error, oversight, or delay that may occur in manual or semi-automated processes12.

This method is also the best because it enhances the security and compliance of the organization, and prevents the terminated employee from accessing or compromising the IT systems or data after departure12.

The other options are not the best methods, but rather alternative or supplementary methods that may have some limitations or drawbacks.

For example:

Login attempts are reconciled to a list of terminated employees is a method that involves monitoring and verifying the login activities of the IT systems, and comparing them with a list of terminated employees to identify and block any unauthorized access attempts34. However, this method is not the best because it is reactive rather than proactive, and may not prevent the terminated employee from accessing the IT systems before the reconciliation is done34.

A list of terminated employees is generated for reconciliation against current IT access is a method that involves creating and maintaining a list of terminated employees, and checking it against the current IT access rights to identify and remove any access that is no longer needed34. However, this method is not the best because it is manual and labor-intensive, and may introduce errors or inconsistencies in the list or the access rights34.

A process to remove employee access during the exit interview is implemented is a method that involves conducting an exit interview with the terminated employee, and revoking the employee’s access to the IT systems during or immediately after the interview34. However, this method is not the best because it depends on the availability and cooperation of the terminated employee, and may not cover all the IT systems or access rights that the employee had34.

Reference: =

1: IT Involvement in Employee Termination, A Checklist3

2: Best Practices to Ensure Departing Employees Retain No Access5

3: User Termination Best Practices – IT Security – Spiceworks2

4: IT Security for Employee Termination – Policies, Checklists, Templates – Endsight1