Question 1
Which control design principle ensures that no single individual can complete a sensitive transaction without involvement of another person?
Correct Answer:
Segregation of duties
Question 2
The principle of least privilege in access control design means that users should be granted:
Correct Answer:
Only the minimum permissions needed to perform their job functions
Question 3
Defense in depth is a control design strategy that involves:
Correct Answer:
Layering multiple controls so that failure of one does not expose the entire system
Question 4
Which control objective is MOST directly supported by implementing input validation in a web application?
Correct Answer:
Preventing injection attacks and data integrity violations
Question 5
When designing controls for a high-risk IT process, which approach provides the GREATEST assurance?
Correct Answer:
Implementing both preventive and detective controls in combination
Question 1
Exam overview

About this Exam

Prepare with the Certified in Risk and Information Systems Control (CRISC) practice quiz. This question bank includes 130 questions covering risk, control, vendor, primary, and management. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

Certified in Risk and Information Systems Control (CRISC)

This practice set contains 130 questions from the matching question bank and focuses on risk, control, vendor, primary, and management. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions