IsacaIsaca
CRISC · Question #430
CRISC Question #430: Real Exam Question with Answer & Explanation
Sign in or unlock CRISC to reveal the answer and full explanation for question #430. The question stem and answer options stay visible for context.
Submitted by sofia.br· Apr 18, 2026IT Risk Assessment
Question
An organization uses a web application hosted by a cloud service that is populated by data sent to the vendor via email on a monthly basis. Which of the following should be the FIRST consideration when analyzing the risk associated with the application?
Options
- AWhether the service provider's data center is located in the same country
- BWhether the data sent by email has been encrypted
- CWhether the data has been appropriately classified
- DWhether the service provider contract allows right of onsite audit
Unlock CRISC to see the answer
You've previewed enough free CRISC questions. Unlock CRISC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Data Classification#Risk Analysis#Third-Party Risk#Cloud Security