exam questions

Exam CRISC All Questions

View all questions & answers for the CRISC exam

Exam CRISC topic 1 question 287 discussion

Actual exam question from Isaca's CRISC
Question #: 287
Topic #: 1
[All CRISC Questions]

Which of the following are true for threats?
Each correct answer represents a complete solution. (Choose three.)

  • A. They can become more imminent as time goes by, or it can diminish
  • B. They can result in risks from external sources
  • C. They are possibility
  • D. They are real
  • E. They will arise and stay in place until they are properly dealt.
Show Suggested Answer Hide Answer
Suggested Answer: ABD 🗳️
Threat is an act of coercion wherein an act is proposed to elicit a negative response. Threats are real, while the vulnerabilities are a possibility. They can result in risks from external sources, and can become imminent by time or can diminish.
Incorrect Answers:
C, E: These two are true for vulnerability, but not threat. Unlike the threat, vulnerabilities are possibility and can result in risks from internal sources. They will arise and stay in place until they are properly dealt.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Kennethlim79
1 month, 2 weeks ago
A. They can become more imminent as time goes by, or it can diminish Threats can evolve over time, becoming more or less likely to occur. For instance, a new software vulnerability may be discovered, increasing the likelihood of a cyberattack. Conversely, an organization's security measures may be improved, reducing the threat's immediacy. B. They can result in risks from external sources Threats often originate from external factors beyond an organization's direct control. These could include natural disasters, economic downturns, or competitors' actions. Internal threats, such as human error or equipment malfunctions, can also arise. C. They are possibilities Threats represent potential events that could negatively impact an organization's objectives. They are not certain to occur, but the possibility exists. Effective risk management involves identifying, assessing, and addressing potential threats to minimize their impact on the organization.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago