Isaca

CRISC Certified in Risk and Information Systems Control

Use original educational practice content, randomized simulator sessions, score history and explanation review for CRISC.

Practice questions are provided in English to match the language commonly used in IT certification exams.

QZ9 is an independent training platform. All practice questions are original and created for educational purposes only. We do not provide unauthorized vendor exam content. Microsoft, AWS, Cisco, CompTIA, PMI and other trademarks belong to their respective owners.

VendorIsaca
CodeCRISC
DurationDuration varies
Questions106 refs
Exam facts

Objective-based preparation without unauthorized content

Certification metadata is preserved from the legacy QZ9 catalog. Questions remain English-only.

Start Practice Test
1Find your exam
2Start the simulator
3Review results
QZ9Independent training platform
Free question preview

Exam simulator

Practice questions are provided in English to match the language commonly used in IT certification exams.

Question 1

- (Exam Topic 1) Which of the following is the BEST course of action to reduce risk impact?

Question 2

- (Exam Topic 1) The PRIMARY objective of testing the effectiveness of a new control before implementation is to:

Question 3

- (Exam Topic 1) A risk practitioner is assisting with the preparation of a report on the organization s disaster recovery (DR) capabilities. Which information would have the MOST impact on the overall recovery profile?

Question 4

- (Exam Topic 1) An organization is planning to engage a cloud-based service provider for some of its data-intensive business processes. Which of the following is MOST important to help define the IT risk associated with this outsourcing activity?

Question 5

- (Exam Topic 1) What is the BEST information to present to business control owners when justifying costs related to controls?