Isaca CRISC Exam - Topic 10 Question 38 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 38
Topic #: 10

An organization has decided to commit to a business activity with the knowledge that the risk exposure is higher than the risk appetite. Which of the following is the risk practitioner's MOST important action related to this decision?

ARecommend risk remediation

BChange the level of risk appetite

CDocument formal acceptance of the risk

DReject the business initiative

Show Suggested Answer

Suggested Answer: C

by Tonette at May 07, 2022, 04:53 PM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ulysses

4 months ago

Rejecting the initiative seems extreme, but D could be valid too.

upvoted 0 times

...

Stephania

4 months ago

Totally agree with C, you need to have that formal acceptance.

upvoted 0 times

...

Louisa

4 months ago

Wait, can they really just change their risk appetite like that?

upvoted 0 times

...

Micheline

4 months ago

I think A makes more sense, remediation should come first!

upvoted 0 times

...

Hubert

5 months ago

Definitely C, documenting acceptance is key.

upvoted 0 times

...

Johnna

5 months ago

I practiced a similar question where the focus was on formal acceptance of risk. It seems like that could be the best answer in this case too.

upvoted 0 times

...

Stephane

5 months ago

I think recommending risk remediation might be the right choice, but it feels like changing the risk appetite could also be a valid option.

upvoted 0 times

...

Kattie

5 months ago

I remember discussing how documenting risk acceptance is crucial when the risk exceeds appetite, but I'm not sure if that's the most important action here.

upvoted 0 times

...

Vivienne

5 months ago

Rejecting the initiative seems too extreme, but I guess if the risk is really high, it might be necessary. I'm leaning towards documentation.

upvoted 0 times

...

Jennifer

5 months ago

I'm going to go with 'No' on this one. The 'docker container inspect' command seems like it would provide comprehensive details about the container, but a simple list of volumes might not be the primary output. I'd want to double-check the documentation to be sure.

upvoted 0 times

...

Gilbert

5 months ago

Banner advertising doesn't seem like the best fit here. The company is looking to expand into a new market, so I think a more targeted approach would be better.

upvoted 0 times

...

Juan

5 months ago

Hmm, I'm a bit unsure on this one. I know Active Directory has a lot of different components, but I can't quite remember which one is specifically for managing environments.

upvoted 0 times

...

Janessa

5 months ago

I think service agents are involved in processing positive acknowledgements, but I'm not completely sure.

upvoted 0 times

...

Cherelle

5 months ago

Hmm, I'm not too familiar with the different Linux firewall options. I'll need to review the details on each one to make sure I pick the best solution.

upvoted 0 times

...