exam questions

Exam CRISC All Questions

View all questions & answers for the CRISC exam

Exam CRISC topic 1 question 156 discussion

Actual exam question from Isaca's CRISC
Question #: 156
Topic #: 1
[All CRISC Questions]

Using which of the following one can produce comprehensive result while performing qualitative risk analysis?

  • A. Scenarios with threats and impacts
  • B. Cost-benefit analysis
  • C. Value of information assets.
  • D. Vulnerability assessment
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
Using list of possible scenarios with threats and impacts will better frame the range of risk and hence can frame more informative result of qualitative analysis.
Incorrect Answers:
B: Cost and benefit analysis is used for taking financial decisions that can be formal or informal, such as appraisal of any project or proposal. The approach weighs the total cost against the benefits expected, and then identifies the most profitable option. It only decides what type of control should be applied for effective risk management.
C, D: These are not sufficient for producing detailed result.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
SuperMax
9 months, 1 week ago
Selected Answer: A
A. Scenarios with threats and impacts When performing qualitative risk analysis, scenarios that consider both threats and impacts are essential to produce comprehensive results. This approach involves identifying potential threats (such as risks or vulnerabilities) and assessing the potential impacts or consequences they may have on the organization. By considering both the threats and the impacts, you can develop a more complete understanding of the risks and their potential consequences, which is crucial for making informed decisions about risk mitigation and management.
upvoted 1 times
SuperMax
9 months, 1 week ago
While the other options (B, C, and D) can be valuable components of risk analysis, they may not be as comprehensive on their own and are often used in conjunction with scenario-based risk analysis. Cost-benefit analysis (B) can help in evaluating the economic aspects of risk mitigation measures. Assessing the value of information assets (C) is important for understanding the significance of the assets at risk. Vulnerability assessment (D) helps identify weaknesses in a system, which is a critical aspect of risk analysis but doesn't provide a complete picture on its own.
upvoted 1 times
...
...
MJORGER
3 years ago
Why not B? If The costs and benefits may be calculated using both qualitative and quantitative measures.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...