Isaca IT Risk Fundamentals Exam Questions

Question 6 of 9

Which of the following is the MAIN reason to include previously overlooked risk in a risk report?

Assurance is needed that the risk dashboard is complete and comprehensive.

Overlooked or ignored risk may become relevant in the future.

The risk report must contain the current state of all risk.

Correct Answer: B

Question 7 of 9

What is the PRIMARY benefit of using generic technology terms in IT risk assessment reports to management?

Clarity on the proper interpretation of reported risk

Simplicity in translating risk reports into other languages

Ease of promoting risk awareness with key stakeholders

Correct Answer: C

Question 8 of 9

Risk monitoring is MOST effective when it is conducted:

throughout the risk treatment planning process.

following changes to the business’s environment.

before and after completing the risk treatment plan.

Correct Answer: B

Question 9 of 9

Key risk indicators (KRIs) are used for which of the following purposes when developing a project plan?

Determining resource allocation

Assigning risk owners

Performing a gap analysis

Correct Answer: B