Exam CRISC topic 1 question 409 discussion

D identifying the vulnerability of critical systems is important however if there is no redundancy in the technical architecture then there are questions of the availability of the critical system. goes back to design

The best way to determine the likelihood of a system availability risk scenario is by assessing the redundancy of technical infrastructure. The likelihood of an availability incident stems from the resiliency of the underlying IT systems and technology components. By evaluating the redundancy, failover mechanisms, and backup provisions in place, one can quantify the probability of outage impacts should hardware, software, or a data center become compromised.

The likelihood of a system availability risk scenario is largely driven by vulnerabilities within the system that could be exploited, leading to downtime or loss of availability. Therefore, vulnerability scan results of critical systems would provide key information for determining this likelihood.

Agree with D

C. From an ISACA mindset, the best way to determine the likelihood of a system availability risk scenario would be to assess option C, which is the vulnerability scan results of critical systems.

Agree with "D". The availability of FT software is important, but it is not sufficient to ensure the overall availability of the system if other components are not redundant. Assessing the redundancy of technical infrastructure ensures that all components are redundant.

Agree with D.