IsacaIsaca
CRISC · Question #357
CRISC Question #357: Real Exam Question with Answer & Explanation
Sign in or unlock CRISC to reveal the answer and full explanation for question #357. The question stem and answer options stay visible for context.
Submitted by devops_kid· Apr 18, 2026IT Risk Assessment
Question
Which of the following should be of MOST concern to a risk practitioner reviewing the system development life cycle (SDLC)?
Options
- ATesting is completed in phases, with user testing scheduled as the final phase.
- BSegregation of duties controls are overridden during user testing phases.
- CData anonymization is used during all cycles of end-user testing.
- DTesting is completed by IT support users without input from end users.
Unlock CRISC to see the answer
You've previewed enough free CRISC questions. Unlock CRISC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#SDLC#User Acceptance Testing#IT Risk Assessment#Testing Strategy