Free ISACA IT-Risk-Fundamentals Exam Dumps Questions & Answers

Detailed risk management reports should be targeted to a specific audience based on:

• A.  industry benchmarks.
• B.  seniority levels in the enterprise.
• C.  need to know.

What is the FIRST step in the risk response process?

• A.  Review risk analysis.
• B.  Review risk appetite.
• C.  Prioritize responses based on impact.

Which of the following includes potential risk events and the associated impact?

• A.  Risk scenario
• B.  Risk policy
• C.  Risk profile

An alert generated when network bandwidth usage exceeds a predefined level is an example of a:

• A.  lag indicator.
• B.  key risk indicator (KRI).
• C.  threat.
• D.  risk event.

Which of the following is an example of an inductive method to gather information?

• A.  Vulnerability analysis
• B.  Controls gap analysis
• C.  Penetration testing