Exam CRISC topic 1 question 547 discussion

A. Resource expenditure against budget Measuring the progress of a risk response action plan requires assessing how well the plan is being executed against predetermined expectations. Monitoring resource expenditure against the budget provides a tangible metric that indicates whether the plan is progressing within its allocated resources and financial constraints. If the expenditure is consistently above budget, it might indicate that the plan's execution is not going as intended, and adjustments may be needed. Conversely, if the expenditure is well below budget, it might either suggest efficient progress or potential delays in executing certain aspects of the plan.

D. continuous data backup controls. The best recommendation to further reduce the impact of ransomware attacks would be to implement "D. continuous data backup controls." Ransomware attacks can encrypt an organization's data, rendering it inaccessible until a ransom is paid. Continuous data backup controls ensure that copies of critical data are regularly and automatically backed up to a secure location. In the event of a ransomware attack, the organization can restore its data from backups without needing to pay the ransom.

For sure

The answer is D. In general data backups are considered the way to handle ransomware impact. Continuous backups do not prevent you from restoring from a point prior to the infection.

The problem is that what is asked is how to reduce the impact. Once the threat materializes, the best way to mitigate it is to keep backup copies. The 2fa would only reduce the probability of it happening, which is not what is being asked. Other questions indicate the possibility that backups have a 'PIN' to avoid being hit by ransomware, but this is not the case.

The question asks about the impact of the attack. So that would mean that the attack already took place and therefore the only answer that makes sense is D.

The question is very tricky. Not sure I am right - but think, (C) is the answer. A. encryption for data at rest B. encryption for data in motion C. two-factor authentication D. continuous data backup controls A & B are obviously wrong. Encryption as a control will not protect against a ransomware attack. D is a bit confusing - however, if you think a bit, a continuous (realtime) backup will also not help as ransomeware would have infected the files, that due to realtime back-up it will also be corrupt. Now, (C) is good.... it hopefully prevents or makes more difficult for a Treat actor to gain and retain access as it will be difficult to compromise the MFA.