Discuss Isaca CRISC Exam Topic 4 Question 31

Which of the following is the MOST important consideration when determining whether to accept residual risk after security controls have been implemented on a critical system?

ACost versus benefit of additional mitigating controls

BAnnualized loss expectancy (ALE) for the system

CFrequency of business impact

DCost of the Information control system

Suggested Answer: A

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Kenneth 11 months ago

I agree with B, understanding ALE is essential for decision-making.

Blair 12 months ago

Wait, D? Really? That seems less relevant to me.

Rene 12 months ago

C is crucial too, can't ignore business impact frequency.

Bo 12 months ago

I think B is more important, ALE gives a clear picture.

Dion 1 year ago

Definitely A, cost vs benefit is key!

Lettie 1 year ago

I feel like the cost of the information control system is less critical compared to the other options, but I could be wrong.

Rene 1 year ago

The frequency of business impact seems relevant too, but I can't recall if it outweighs the cost-benefit analysis.

Ilene 1 year ago

I remember studying the annualized loss expectancy (ALE) and how it helps in risk assessment. That might be the key consideration here.

Val 1 year ago

I think the cost versus benefit of additional mitigating controls is really important, but I'm not entirely sure if it's the MOST important factor.

Chantell 1 year ago

I'm a bit confused by the different MIMO configurations listed. I'll need to make sure I understand the differences between 2T4R, 4T8R, 4T4R, and 2T2R before answering this.

Elenor 1 year ago

I'm worried about getting the exact calculation right. Those decimal points look tricky, and I'll need to be careful with my math under exam pressure.

Serina 1 year ago

I'm a bit confused here. Do I need to revoke the user's permissions or just prevent new logins? I'm not sure if B or D is the better option.

Melodie 1 year ago

Okay, I think I understand now. The uniform expression is for a continuous range, while the choice expression is for discrete options. So for the learning_rate, uniform makes sense, and for the batch_size, choice is the way to go. I feel good about this!

Lashawn 1 year ago

It could be all of the above, but storing something like "Romeo and Juliet" on a blockchain feels a bit unnecessary to me.

Isaca CRISC Exam - Topic 4 Question 31 Discussion