Isaca CRISC Exam - Topic 1 Question 65 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 65
Topic #: 1

A risk practitioner has established that a particular control is working as desired, but the annual cost of maintenance has increased and now exceeds the expected annual loss exposure. The result is that the control is:

Amature

Bineffective.

Coptimized.

Dinefficient.

Show Suggested Answer

Suggested Answer: B

by Angella at Oct 22, 2023, 07:37 PM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Emily

3 months ago

This is a classic case of over-maintenance!

upvoted 0 times

...

Lisbeth

3 months ago

Really? I thought mature controls wouldn't have this issue.

upvoted 0 times

...

Stefania

3 months ago

But isn't it still working as intended?

upvoted 0 times

...

Jolene

4 months ago

I agree, the costs outweigh the benefits now.

upvoted 0 times

...

Mitsue

4 months ago

Sounds like it's definitely inefficient.

upvoted 0 times

...

Lavera

4 months ago

I thought a mature control was one that was well-established, but if it's costing more than the risk it mitigates, maybe it's ineffective?

upvoted 0 times

...

Stephen

4 months ago

I'm not entirely sure, but I feel like if the control is still working but too costly, it might be labeled as inefficient.

upvoted 0 times

...

Daren

4 months ago

I think I saw a similar question where we had to determine if a control was optimized or not. If the costs are too high, it seems like it could be inefficient.

upvoted 0 times

...

Dahlia

5 months ago

I remember discussing how a control can be considered ineffective if its cost outweighs the benefits. That might be the case here.

upvoted 0 times

...

Therese

5 months ago

I feel pretty confident about this. The key information is that the control is working as desired, but the cost is too high. That means it's inefficient, so I'll select option D.

upvoted 0 times

...

Ryan

5 months ago

This is a tricky one. I'm not entirely sure about the difference between "mature" and "optimized" in this context. I'll need to think it through carefully.

upvoted 0 times

...

Georgene

5 months ago

Okay, I think I've got this. If the control is working as desired but the cost exceeds the expected loss, then it must be inefficient. I'll go with option D.

upvoted 0 times

...

Suzi

5 months ago

Hmm, I'm a bit confused by this one. I'll need to review the concepts of control effectiveness and efficiency to make sure I understand the difference between the options.

upvoted 0 times

...

Lezlie

5 months ago

This seems like a straightforward question about the effectiveness of a control. I'll need to carefully consider the cost of maintenance versus the expected loss exposure to determine the correct answer.

upvoted 0 times

...

Nathalie

5 months ago

Wait, I'm a little confused. Aren't all of these valid ways to find the sensor version? I'm not sure which one would be considered "not a way" to do it. I'll have to re-read the question carefully.

upvoted 0 times

...

Georgeanna

5 months ago

Ah, this is a good one! I remember learning about the different printing commands in my Linux class. I believe the correct answer is A. lpd. That's the legacy program for managing the printer queue from the command line.

upvoted 0 times

...

Rodolfo

5 months ago

Okay, I think I've got a strategy. I'll try using a unique text or image next to the textbox to identify it.

upvoted 0 times

...

Bobbye

5 months ago

Hmm, I'm a bit unsure about the difference between IKEv1 and IKEv2 here. I'll need to review my notes on those protocols to make sure I understand the implications.

upvoted 0 times

...

Chana

5 months ago

Okay, the two features that likely led to this decision are the embedded cryptoprocessor and the hardware-backed public key storage. Those would provide a secure hardware-based approach to authentication and encryption for remote access.

upvoted 0 times

...