IIA Exam IIA-CCSA Topic 12 Question 101 Discussion

Actual exam question for IIA's IIA-CCSA exam

Question #: 101
Topic #: 12

[All IIA-CCSA Questions]

Which if the following is Correct?

AVulnerability/control risk is determined after ranking control activities.

BVulnerability/control risk is determined after ranking risk assessment.

CVulnerability/control risk is determined after ranking inherent risk.

DVulnerability/control risk is determined after ranking competence and integrity values.

Show Suggested Answer

Suggested Answer: C

by Quentin at May 02, 2025, 12:53 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

23 hours ago

I disagree, I believe it's C) Vulnerability/control risk is determined after ranking inherent risk.

upvoted 0 times

...

2 days ago

Hmm, I'm not sure about that. I think option B makes more sense - ranking risk assessment should come before vulnerability/control risk.

upvoted 0 times

...

8 days ago

I think the correct answer is A) Vulnerability/control risk is determined after ranking control activities.

upvoted 0 times

...

11 days ago

I think option C is the correct answer. Vulnerability/control risk is determined after ranking inherent risk.

upvoted 0 times

...