CA Foundation Business Economics Questions 2023 - Part 32
Fri, 03 Mar 2023
Inspirational journeys
Follow the stories of academics and their research expeditions
CRISC—Certified in Risk and Information Systems Control Certification Questions and answer - Part 74
1. Which of the following BEST measures the operational effectiveness of risk management capabilities?
A) Capability maturity models (CMMs)
B) Metric thresholds
C) Key risk indicators (KRIs)
D) Key performance indicators (KPIs)
2. You are the project manager of GHT project. You have initiated the project and conducted the feasibility study. What result would you get after conducting feasibility study?Each correct answer represents a complete solution. Choose all that apply.(Select 2answers)
A) Recommend alternatives and course of action
B) Risk response plan
C) Project management plan
D) Results of criteria analyzed, like costs, benefits, risk, resources required and organizational impact
3. Your project change control board has approved several scope changes that will drastically alter your project plan. You and the project team set about updating the project scope, the WBS, the WBS dictionary, the activity list, and the project network diagram. There are also some changes caused to the project risks, communication, and vendors. What also should the project manager update based on these scope changes?
A) Stakeholder identification
B) Vendor selection process
C) Quality baseline
D) Process improvement plan
4. You are the risk control professional of your enterprise. You have implemented a tool that correlates information from multiple sources. To which of the following do this monitoring tool focuses?
A) Transaction data
B) Process integrity
C) Configuration settings
D) System changes
5. Which of the following are the security plans adopted by the organization?Each correct answer represents a complete solution. Choose all that apply.(Select 3answers)
A) Business continuity plan
B) Backup plan
C) Disaster recovery plan
D) Project management plan
A) Capability maturity models (CMMs)
B) Metric thresholds
C) Key risk indicators (KRIs)
D) Key performance indicators (KPIs)
2. You are the project manager of GHT project. You have initiated the project and conducted the feasibility study. What result would you get after conducting feasibility study?Each correct answer represents a complete solution. Choose all that apply.(Select 2answers)
A) Recommend alternatives and course of action
B) Risk response plan
C) Project management plan
D) Results of criteria analyzed, like costs, benefits, risk, resources required and organizational impact
3. Your project change control board has approved several scope changes that will drastically alter your project plan. You and the project team set about updating the project scope, the WBS, the WBS dictionary, the activity list, and the project network diagram. There are also some changes caused to the project risks, communication, and vendors. What also should the project manager update based on these scope changes?
A) Stakeholder identification
B) Vendor selection process
C) Quality baseline
D) Process improvement plan
4. You are the risk control professional of your enterprise. You have implemented a tool that correlates information from multiple sources. To which of the following do this monitoring tool focuses?
A) Transaction data
B) Process integrity
C) Configuration settings
D) System changes
5. Which of the following are the security plans adopted by the organization?Each correct answer represents a complete solution. Choose all that apply.(Select 3answers)
A) Business continuity plan
B) Backup plan
C) Disaster recovery plan
D) Project management plan
1. Right Answer: D
Explanation: Key performance indicators (KPIs) provide insights into the operational effectiveness of the concept or capability that they monitor. Key Performance Indicators is a set of measures that a company or industry uses to measure and/or compare performance in terms of meeting their strategic and operational goals. KPIs vary with company to company, depending on their priorities or performance criteria.A company must establish its strategic and operational goals and then choose their KPIs which can best reflect those goals. For example, if a software company's goal is to have the fastest growth in its industry, its main performance indicator may be the measure of its annual revenue growth.Incorrect Answers:A: Capability maturity models (CMMs) assess the maturity of a concept or capability and do not provide insights into operational effectiveness.B: Metric thresholds are decision or action points that are enacted when a KPI or KRI reports a specific value or set of values. It odes not provide any insights into operational effectiveness.C: Key risk indicators (KRIs) only provide insights into potential risks that may exist or be realized within a concept or capability that they monitor. Key RiskIndicators are the prime monitoring indicators of the enterprise. KRIs are highly relevant and possess a high probability of predicting or indicating important risk.KRIs help in avoiding excessively large number of risk indicators to manage and report that a large enterprise may have.
2. Right Answer: A,D
Explanation: The completed feasibility study results should include a cost/benefit analysis report that: Provides the results of criteria analyzed (e.g., costs, benefits, risk, resources required and organizational impact) Recommends one of the alternatives and a course of actionIncorrect Answers:B, C: Project management plan and risk response plan are the results of plan project management and plan risk response, respectively. They are not the result of feasibility study.
3. Right Answer: C
Explanation: When changes enter the project scope, the quality baseline is also updated. The quality baseline records the quality objectives of the project and is based on the project requirements.Incorrect Answers:A: The stakeholder identification process will not change because of scope additions. The number of stakeholders may change but how they are identified will not be affected by the scope addition.B: The vendor selection process likely will not change because of added scope changes. The vendors in the project may, but the selection process will not.D: The process improvement plan aims to improve the project's processes regardless of scope changes.
4. Right Answer: A
Explanation: Monitoring tools that focuses on transaction data generally correlate information from one system to another, such as employee data from the human resources(HR) system with spending information from the expense system or the payroll system.Incorrect Answers:B: Process integrity is confirmed within the system, it dose not need monitoring.C: Configuration settings are generally compared against predefined values and not based on the correlation between multiple sources.D: System changes are compared from a previous state to the current state, it dose not correlate information from multiple sources.
5. Right Answer: A,B,C
Explanation: Organizations create different security plans to address different scenarios. Many of the security plans are common to most organizations.Most used security plans found in many organizations are: Business continuity plan Disaster recovery plan Backup plan Incident response planIncorrect Answers:D: Project management plan is not a security plan, but a plan which describes the implementation of the project.
Explanation: Key performance indicators (KPIs) provide insights into the operational effectiveness of the concept or capability that they monitor. Key Performance Indicators is a set of measures that a company or industry uses to measure and/or compare performance in terms of meeting their strategic and operational goals. KPIs vary with company to company, depending on their priorities or performance criteria.A company must establish its strategic and operational goals and then choose their KPIs which can best reflect those goals. For example, if a software company's goal is to have the fastest growth in its industry, its main performance indicator may be the measure of its annual revenue growth.Incorrect Answers:A: Capability maturity models (CMMs) assess the maturity of a concept or capability and do not provide insights into operational effectiveness.B: Metric thresholds are decision or action points that are enacted when a KPI or KRI reports a specific value or set of values. It odes not provide any insights into operational effectiveness.C: Key risk indicators (KRIs) only provide insights into potential risks that may exist or be realized within a concept or capability that they monitor. Key RiskIndicators are the prime monitoring indicators of the enterprise. KRIs are highly relevant and possess a high probability of predicting or indicating important risk.KRIs help in avoiding excessively large number of risk indicators to manage and report that a large enterprise may have.
2. Right Answer: A,D
Explanation: The completed feasibility study results should include a cost/benefit analysis report that: Provides the results of criteria analyzed (e.g., costs, benefits, risk, resources required and organizational impact) Recommends one of the alternatives and a course of actionIncorrect Answers:B, C: Project management plan and risk response plan are the results of plan project management and plan risk response, respectively. They are not the result of feasibility study.
3. Right Answer: C
Explanation: When changes enter the project scope, the quality baseline is also updated. The quality baseline records the quality objectives of the project and is based on the project requirements.Incorrect Answers:A: The stakeholder identification process will not change because of scope additions. The number of stakeholders may change but how they are identified will not be affected by the scope addition.B: The vendor selection process likely will not change because of added scope changes. The vendors in the project may, but the selection process will not.D: The process improvement plan aims to improve the project's processes regardless of scope changes.
4. Right Answer: A
Explanation: Monitoring tools that focuses on transaction data generally correlate information from one system to another, such as employee data from the human resources(HR) system with spending information from the expense system or the payroll system.Incorrect Answers:B: Process integrity is confirmed within the system, it dose not need monitoring.C: Configuration settings are generally compared against predefined values and not based on the correlation between multiple sources.D: System changes are compared from a previous state to the current state, it dose not correlate information from multiple sources.
5. Right Answer: A,B,C
Explanation: Organizations create different security plans to address different scenarios. Many of the security plans are common to most organizations.Most used security plans found in many organizations are: Business continuity plan Disaster recovery plan Backup plan Incident response planIncorrect Answers:D: Project management plan is not a security plan, but a plan which describes the implementation of the project.
Tags:
it certification certified it it exams isaca certification isaca cgeit isaca cisa isaca cism isaca cobit 5 isaca crisc isaca questions practice exams pratice quests risc maangement it management it questions isaca answers isaca practice isaca dumps isaca test test questions questins and answer explanation0 Comments
Categories
Recent posts
CA Foundation Business Economics Questions 2023 - Part 31
Fri, 03 Mar 2023
CA Foundation Business Economics Questions 2023 - Part 30
Fri, 03 Mar 2023
Leave a comment