ISC CGRC Actual Free Exam Questions & Community Discussion

  • Exam Code/Number: CGRC
  • Exam Name/Title: Certified in Governance Risk and Compliance
  • Certification Provider: ISC
  • Corresponding Certification: ISC Certification
  • Exam Questions: 725
  • Updated On: Jul 21, 2026
Frank is the project manager of the NHH Project. He is working with the project team to create a plan to document the procedures to manage risks throughout the project. This document will define how risks will be identified and quantified.
It will also define how contingency plans will be implemented by the project team. What document is Frank and the NHH Project team creating in this scenario? Response:
Correct Answer: B Vote an answer
Which of the following processes has the goal to ensure that any change does not lead to reduced or compromised security?
Response:
Correct Answer: C Vote an answer
Which of the following control families belongs to the management class of security controls?
Response:
Correct Answer: D Vote an answer
A complex system of systems composed of subsystems and services that are part of a continuously evolving, complex community of people, devices, information and services interconnected by a network that enhances information sharing and collaboration. Subsystems and services may or may not be developed or owned by the same entity, and, in general, will not be continually present during the full lifecycle of the system of systems.
Response:
Correct Answer: D Vote an answer
James work as an IT systems personnel in SoftTech Inc. He performs the following tasks:
- Runs regular backups and routine tests of the validity of the backup data.
- Performs data restoration from the backups whenever required.
- Maintains the retained records in accordance with the established information classification policy.
What is the role played by James in the organization?
Response:
Correct Answer: C Vote an answer
Fill in the blank with an appropriate word. ________ ensures that the information is not disclosed to unauthorized persons or processes.
Solution: Confidentiality
Determine whether the given solution is correct?
Response:
Correct Answer: B Vote an answer
Which NIST SP provides a provides a security control catalog for systems at each level, Security and Privacy Controls for Federal Information Systems and Organizations.
Response:
Correct Answer: B Vote an answer
What is FIPS 199?
Response:
Correct Answer: A Vote an answer
Which of the following acts is used to recognize the importance of information security to the economic and national security interests of the United States?
Response:
Correct Answer: C Vote an answer
Risks with low ratings of probability and impact are included on a ____ for future monitoring.
Response:
Correct Answer: D Vote an answer
Step 7 of the risk management framework can be described as:
Response:
Correct Answer: C Vote an answer
What is BRM?
Response:
Correct Answer: D Vote an answer
0
0
0
10