- (Exam Topic 1)
Which of the following would be MOST useful when measuring the progress of a risk response action plan?

1. A. Percentage of mitigated risk scenarios
2. B. Annual loss expectancy (ALE) changes
3. C. Resource expenditure against budget
4. D. An up-to-date risk register

Correct Answer: D

- (Exam Topic 3)
When of the following provides the MOST tenable evidence that a business process control is effective?

1. A. Demonstration that the control is operating as designed
2. B. A successful walk-through of the associated risk assessment
3. C. Management attestation that the control is operating effectively
4. D. Automated data indicating that risk has been reduced

Correct Answer: C

- (Exam Topic 3)
Which of the following is the GREATEST concern associated with redundant data in an organization's inventory system?

1. A. Poor access control
2. B. Unnecessary data storage usage
3. C. Data inconsistency
4. D. Unnecessary costs of program changes

Correct Answer: C

- (Exam Topic 3)
During an acquisition, which of the following would provide the MOST useful input to the parent company's risk practitioner when developing risk scenarios for the post-acquisition phase?

1. A. Risk management framework adopted by each company
2. B. Risk registers of both companies
3. C. IT balanced scorecard of each company
4. D. Most recent internal audit findings from both companies

Correct Answer: C

- (Exam Topic 3)
Which of the following is MOST helpful in providing an overview of an organization's risk management program?

1. A. Risk management treatment plan
2. B. Risk assessment results
3. C. Risk management framework
4. D. Risk register

Correct Answer: C