問題 1
Question#1Topic1
Which of the following is the MOST important reason to maintain key risk indicators (KRIs)?
正解を表示
正解
D
ISACA · CRISC
CRISC 試験練習問題
Certified in Risk and Information Systems Control
CRISC の PDF 練習問題。資料の言語は 英語です。購入はこの試験のみで、自動更新はありません。
試験概要
CRISC は「Certified in Risk and Information Systems Control」の認定試験です。試験形式、時間、対応言語は以下をご確認ください。最新の出題範囲や受験条件は公式サイトをご参照ください。
- 試験コード
- CRISC
- 公式の試験・資格名
- Certified in Risk and Information Systems Control
- 試験形式
- 選択式問題
- 試験時間
- 240 分
- 公式試験の問題数
- 150 問
- 受験可能な言語
- 英語、スペイン語、日本語
公式試験の対応言語と練習問題ファイルの言語は異なります。試験の版と言語は公式の予約ページでご確認ください。
公式情報： Provider reference 1 · Provider reference 2
情報確認日：2026-10-20
対応言語
- 英語
- 簡体字中国語
購入前にお試し
最初の 20 問を無料プレビュー
全 1,896 問
題庫の元の順序で表示します。回答欄を開くと、正解と収録されている解説を確認できます。
問題の言語：英語。問題文・選択肢・正解・解説は元の題庫の言語で表示します。
免責事項：ExamPico の問題はすべてインターネット上の情報を整理したもので、学習参考用として提供しています。
問題 2
Question#2Topic1
You are the project manager of a HGT project that has recently finished the final compilation process. The project customer has signed off on the project completion and you have to do few administrative closure activities. In the project, there were several large risks that could have wrecked the project but you and your project team found some new methods to resolve the risks without affecting the project costs or project completion date. What should you do with the risk responses that you have identified during the project's monitoring and controlling process?
正解と解説を表示
正解
C
解説
The risk responses that do not exist up till then, should be included in the organization's lessons learned database so other project managers can use these responses in their project if relevant.
Incorrect Answers:
A: The responses are not in the project management plan, but in the risk response plan during the project and they'll be entered into the organization's lessons learned database.
B: The risk responses are included in the risk response plan, but after completing the project, they should be entered into the organization's lessons learned database.
D: If the new responses that were identified is only included in the project's risk register then it may not be shared with project managers working on some other project.
Incorrect Answers:
A: The responses are not in the project management plan, but in the risk response plan during the project and they'll be entered into the organization's lessons learned database.
B: The risk responses are included in the risk response plan, but after completing the project, they should be entered into the organization's lessons learned database.
D: If the new responses that were identified is only included in the project's risk register then it may not be shared with project managers working on some other project.
問題 3
Question#3Topic1
You are the project manager of GHT project. You have identified a risk event on your project that could save $100,000 in project costs if it occurs. Which of the following statements BEST describes this risk event?
正解と解説を表示
正解
D
解説
This risk event has the potential to save money on project costs, so it is an opportunity, and the appropriate strategy to use in this case is the exploit strategy. The exploit response is one of the strategies to negate risks or threats appear in a project. This strategy may be selected for risks with positive impacts where the organization wishes to ensure that the opportunity is realized. Exploiting a risk event provides opportunities for positive impact on a project. Assigning more talented resources to the project to reduce the time to completion is an example of exploit response.
Incorrect Answers:
A, C: Mitigation and avoidance risk response is used in case of negative risk events, and not in positive risk events. Here in this scenario, as it is stated that the event could save $100,000, hence it is a positive risk event. Therefore should not be mitigated or avoided.
B: To accept risk means that no action is taken relative to a particular risk; loss is accepted if it occurs. But as this risk event bring an opportunity, it should me exploited and not accepted.
Incorrect Answers:
A, C: Mitigation and avoidance risk response is used in case of negative risk events, and not in positive risk events. Here in this scenario, as it is stated that the event could save $100,000, hence it is a positive risk event. Therefore should not be mitigated or avoided.
B: To accept risk means that no action is taken relative to a particular risk; loss is accepted if it occurs. But as this risk event bring an opportunity, it should me exploited and not accepted.
問題 4
Question#4Topic1
You are the project manager of a large construction project. This project will last for 18 months and will cost $750,000 to complete. You are working with your project team, experts, and stakeholders to identify risks within the project before the project work begins. Management wants to know why you have scheduled so many risk identification meetings throughout the project rather than just initially during the project planning. What is the best reason for the duplicate risk identification sessions?
正解と解説を表示
正解
C
解説
Risk identification is an iterative process because new risks may evolve or become known as the project progresses through its life cycle.
Incorrect Answers:
A: Stakeholders are encouraged to participate in the risk identification process, but this is not the best choice.
B: Risk identification focuses on discovering new risk events, not the events which did not happen.
D: The primary reason for iterations of risk identification is to identify new risk events.
Incorrect Answers:
A: Stakeholders are encouraged to participate in the risk identification process, but this is not the best choice.
B: Risk identification focuses on discovering new risk events, not the events which did not happen.
D: The primary reason for iterations of risk identification is to identify new risk events.
問題 5
Question#5Topic1
You are the risk official in Bluewell Inc. You are supposed to prioritize several risks. A risk has a rating for occurrence, severity, and detection as 4, 5, and 6, respectively. What Risk Priority Number (RPN) you would give to it?
正解と解説を表示
正解
A
解説
Steps involving in calculating risk priority number are as follows:
✑ Identify potential failure effects
✑ Identify potential causes
✑ Establish links between each identified potential cause
✑ Identify potential failure modes
✑ Assess severity, occurrence and detection
✑ Perform score assessments by using a scale of 1 -10 (low to high rating) to score these assessments.
✑ Compute the RPN for a particular failure mode as Severity multiplied by occurrence and detection.
RPN = Severity * Occurrence * Detection
Hence,
RPN = 4 * 5 * 6 -
= 120
Incorrect Answers:
B, C, D: These are not RPN for given values of severity, occurrence, and detection.
✑ Identify potential failure effects
✑ Identify potential causes
✑ Establish links between each identified potential cause
✑ Identify potential failure modes
✑ Assess severity, occurrence and detection
✑ Perform score assessments by using a scale of 1 -10 (low to high rating) to score these assessments.
✑ Compute the RPN for a particular failure mode as Severity multiplied by occurrence and detection.
RPN = Severity * Occurrence * Detection
Hence,
RPN = 4 * 5 * 6 -
= 120
Incorrect Answers:
B, C, D: These are not RPN for given values of severity, occurrence, and detection.
ダウンロードと個人利用
- この試験の練習問題を、1・3・6・12か月のダウンロード期間で個別に購入できます。
- お支払い確認後、作成状況がマイライブラリに表示されます。PDF の準備完了時にメールでお知らせします。
- 期間内は再ダウンロードできます。期限後は新しい期間をご購入ください。
- PDF は個人学習専用です。転売や公開共有は禁止されています。
- 期限後も端末に保存済みのファイルを遠隔で削除することはありません。