ISACA Certified in Risk and Information Systems Control (CRISC®) Exam Guide

19

Practice Quiz – Part 2

1. Which of the following best describes a threat?
   1. The likelihood of an event occurring
   2. A weakness in a system or process
   3. An event or action that has the potential to cause harm
   4. The impact of an event or action

Answer: C. An event or action that has the potential to cause harm.

A threat is an event or action that has the potential to cause harm to an organization’s assets, such as its data, systems, or people. Threats can be intentional, such as a cyberattack or theft, or unintentional, such as a natural disaster or equipment failure.

2. Which of the following best describes a vulnerability?
   1. The likelihood of an event occurring
   2. A weakness in a system or process
   3. An event or action that has the potential to cause harm
   4. The impact ...