- (Exam Topic 3)
Which of the following is the MOST important responsibility of a risk owner?

1. A. Testing control design
2. B. Accepting residual risk
3. C. Establishing business information criteria
4. D. Establishing the risk register

Correct Answer: C

- (Exam Topic 2)
Which of the following is MOST important to ensure when continuously monitoring the performance of a client-facing application?

1. A. Objectives are confirmed with the business owne
2. B. Control owners approve control changes.
3. C. End-user acceptance testing has been conducte
4. D. Performance information in the log is encrypte

Correct Answer: B

- (Exam Topic 4)
Which of the following is the BEST approach for an organization in a heavily regulated industry to comprehensively test application functionality?

1. A. Use production data in a non-production environment
2. B. Use masked data in a non-production environment
3. C. Use test data in a production environment
4. D. Use anonymized data in a non-production environment

Correct Answer: D

- (Exam Topic 3)
Which of the following should be considered when selecting a risk response?

1. A. Risk scenarios analysis
2. B. Risk response costs
3. C. Risk factor awareness
4. D. Risk factor identification

Correct Answer: B

- (Exam Topic 2)
Which of the following will MOST improve stakeholders' understanding of the effect of a potential threat?

1. A. Establishing a risk management committee
2. B. Updating the organization's risk register to reflect the new threat
3. C. Communicating the results of the threat impact analysis
4. D. Establishing metrics to assess the effectiveness of the responses

Correct Answer: C