Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
It is D. Inherent risk is the risk without the control. The control exists, patching, it simply is not optimal in the scenario. Lack of current patches raises residual risk. To increase inherent risk you need to start a new activity like a new business process etc, without this, the inherent risk "just is".
Correct 'D'.
It is so obvious it is D - why the doubts?