Prepare with ISC CGRC exam practice material, pass for sure

ISC CGRC Exam Overview:

ISC CGRC Exam Syllabus Topics:

ISC Certified in Governance Risk and Compliance Sample Questions:

1. Which of the following objectives are defined by integrity in the C.I.A triad of information security systems? Each correct answer represents a part of the solution. Choose three.
Response:

A) It prevents the intentional or unintentional unauthorized disclosure of a message's contents .
B) It prevents the unauthorized or unintentional modification of information by the authorized users.
C) It preserves the internal and external consistency of information.
D) It prevents the modification of information by the unauthorized users.

2. The physical surroundings in which an information system processes, stores, transmits, or disseminates information is referred to as Response:

A) Environment of Operation
B) IT infrastructure
C) Information System
D) Facility

3. Interrelationships of system authorization processes.
Response:

A) 1. Coordinate Security for Interconnected Systems.
2. Apply Minimum Security Baselines.
3. Assess Risk
4. Develop Security Procedures
5. Document the Accreditation Decision
6. System Inventory Process.
7. Create System Authorization Documentation
8. Develop System Security Plan
9. Conduct Certification Testing
10. System Security Authorization Project Planning.
B) 1. System Security Authorization Project Planning.
2. System Inventory Process.
3. Assess Sensitivity and Criticality
4. Develop System Security Plan
5. Coordinate Security for Interconnected Systems.
6. Apply Minimum Security Baselines.
7. Assess Risk
8. Develop Security Procedures
9. Conduct Certification Testing
10. Plan for Remediation
11. Create System Authorization Documentation
12. Document the Accreditation Decision
C) 1. Conduct Certification Testing
2. Plan for Remediation
3. Create System Authorization Documentation
4. Document the Accreditation Decision
5. System Inventory Process.
6. Coordinate Security for Interconnected Systems.
7. Assess Risk
8. Develop System Security Plan
9. System Security Authorization Project Planning.
10. Apply Minimum Security Baselines.
D) 1. System Security Authorization Project Planning.
2. System Inventory Process.
3. Assess Sensitivity and Criticality
4. Develop System Security Plan
5. Create System Authorization Documentation
6. Document the Accreditation Decision
7. Assess Risk
8. Apply Minimum Security Baselines.
9. Develop Security Procedures
10. Conduct Certification Testing
11. Coordinate Security for Interconnected Systems.
12. Plan for Remediation

4. In accordance with NIST SP 800-59 a National Security System is a system that its function, operation, or use must fulfil some of the following criteria.
CHOOSE ALL THAT APPLY.
Response:

A) Invove intelligence activities
B) Involves equipment that is an integral part of a weapon or weapons system
C) Involves command and control of military forces
D) Involves cryptologic activities related to national security

5. Managing information security risk from an organization-wide perspective has to do with the following processes except one. Choose the exception.
Response:

A) Mitigating risk
B) Framing risk
C) Assessing risk
D) responding to rist

Solutions: