MENU
A risk practitioner has established that a particular control is working as desired, but the annual cost of maintenance has increased and now exceeds the expected annual loss exposure. The result is that the control is:
Suggested Answer: B
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
19 comments · newest first
EM
Emily
10 months ago
This is a classic case of over-maintenance!
LI
Lisbeth
11 months ago
Really? I thought mature controls wouldn't have this issue.
ST
Stefania
11 months ago
But isn't it still working as intended?
JO
Jolene
11 months ago
I agree, the costs outweigh the benefits now.
MI
Mitsue
11 months ago
Sounds like it's definitely inefficient.
LA
Lavera
12 months ago
I thought a mature control was one that was well-established, but if it's costing more than the risk it mitigates, maybe it's ineffective?
ST
Stephen
12 months ago
I'm not entirely sure, but I feel like if the control is still working but too costly, it might be labeled as inefficient.
DA
Daren
12 months ago
I think I saw a similar question where we had to determine if a control was optimized or not. If the costs are too high, it seems like it could be inefficient.
DA
Dahlia
1 year ago
I remember discussing how a control can be considered ineffective if its cost outweighs the benefits. That might be the case here.
TH
Therese
1 year ago
I feel pretty confident about this. The key information is that the control is working as desired, but the cost is too high. That means it's inefficient, so I'll select option D.
RY
Ryan
1 year ago
This is a tricky one. I'm not entirely sure about the difference between "mature" and "optimized" in this context. I'll need to think it through carefully.
GE
Georgene
1 year ago
Okay, I think I've got this. If the control is working as desired but the cost exceeds the expected loss, then it must be inefficient. I'll go with option D.
SU
Suzi
1 year ago
Hmm, I'm a bit confused by this one. I'll need to review the concepts of control effectiveness and efficiency to make sure I understand the difference between the options.
LE
Lezlie
1 year ago
This seems like a straightforward question about the effectiveness of a control. I'll need to carefully consider the cost of maintenance versus the expected loss exposure to determine the correct answer.
NA
Nathalie
1 year ago
Wait, I'm a little confused. Aren't all of these valid ways to find the sensor version? I'm not sure which one would be considered "not a way" to do it. I'll have to re-read the question carefully.
GE
Georgeanna
1 year ago
Ah, this is a good one! I remember learning about the different printing commands in my Linux class. I believe the correct answer is A. lpd. That's the legacy program for managing the printer queue from the command line.
RO
Rodolfo
1 year ago
Okay, I think I've got a strategy. I'll try using a unique text or image next to the textbox to identify it.
BO
Bobbye
1 year ago
Hmm, I'm a bit unsure about the difference between IKEv1 and IKEv2 here. I'll need to review my notes on those protocols to make sure I understand the implications.
CH
Chana
1 year ago
Okay, the two features that likely led to this decision are the embedded cryptoprocessor and the hardware-backed public key storage. Those would provide a secure hardware-based approach to authentication and encryption for remote access.