MENU
An organization is analyzing the risk of shadow IT usage. Which of the following is the MOST important input into the assessment?
Suggested Answer: A
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
PE
Pearly
11 months ago
Wait, are we really saying business benefits matter less? That’s wild!
GE
Gennie
12 months ago
Totally agree, data classification should be the priority here.
AU
Audra
12 months ago
Volume of data is key too, but data classification is crucial.
SA
Sarina
12 months ago
Really? I thought the business benefits were more important.
HA
Hannah
1 year ago
Gotta consider the classification of the data first!
TI
Tiffiny
1 year ago
The volume of data seems less relevant compared to how sensitive the data is. I think classification might be the best choice, but I’m not completely confident.
SO
Son
1 year ago
I’m not entirely sure, but I think the business benefits of shadow IT might be a key factor too. We had a practice question that emphasized weighing risks against potential gains.
MA
Maddie
1 year ago
I remember we discussed the importance of understanding the classification of data in relation to shadow IT risks. It seems like that could be crucial here.
GR
Gregoria
1 year ago
I feel like application-related risks are important, but I can't recall if they are the most critical input. We did cover similar scenarios in class.
TY
Ty
1 year ago
Okay, I think I've got it. The diagram shows a spoke-to-spoke via hub topology, which matches option B. Time to mark that down and move on to the next question.
MA
Margarita
1 year ago
Okay, I think I've got a good handle on this. The key is to focus on the potential issues with the automated regression testing process that could allow the defect to slip through.
JU
Justine
1 year ago
This feels similar to the practice questions where we analyzed call flows and IP addressing, but I can't recall the exact IP for this scenario.
NO
Nobuko
1 year ago
This is a great question to test our understanding of injection vulnerabilities. Based on the description, SQL Injection seems like the most relevant answer choice here. I'll double-check the other options, but I'm feeling confident about SQL Injection as the correct answer.