- (Exam Topic 2)
Which of the following is the MOST important objective of embedding risk management practices into the initiation phase of the project management life cycle?

1. A. To deliver projects on time and on budget
2. B. To assess inherent risk
3. C. To include project risk in the enterprise-wide IT risk profit.
4. D. To assess risk throughout the project

Correct Answer: B

- (Exam Topic 3)
The PRIMARY reason for prioritizing risk scenarios is to:

1. A. provide an enterprise-wide view of risk
2. B. support risk response tracking
3. C. assign risk ownership
4. D. facilitate risk response decisions.

Correct Answer: D

- (Exam Topic 3)
Which of the following should be management's PRIMARY focus when key risk indicators (KRIs) begin to rapidly approach defined thresholds?

1. A. Designing compensating controls
2. B. Determining if KRIs have been updated recently
3. C. Assessing the effectiveness of the incident response plan
4. D. Determining what has changed in the environment

Correct Answer: D

- (Exam Topic 2)
An internally developed payroll application leverages Platform as a Service (PaaS) infrastructure from the cloud. Who owns the related data confidentiality risk?

1. A. IT infrastructure head
2. B. Human resources head
3. C. Supplier management head
4. D. Application development head

Correct Answer: B

- (Exam Topic 3)
Which of the following is the BEST key performance indicator (KPI) to measure the effectiveness of an antivirus program?

1. A. Percentage of IT assets with current malware definitions
2. B. Number of false positives defected over a period of time
3. C. Number of alerts generated by the anti-virus software
4. D. Frequency of anti-vinjs software updates

Correct Answer: A