CRISC Information Technology and Security Practice Question
A financial institution is evaluating cyber insurance to cover potential losses from a ransomware attack. Which factor is most likely to increase the insurance premium?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Weak access controls and lack of multi-factor authentication
Weak access controls (e.g., lack of multi-factor authentication) increase the likelihood and potential impact of a ransomware attack, leading insurers to charge higher premiums.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Weak access controls and lack of multi-factor authentication
Why this is correct
Higher risk leads to higher premium.
- ✗
Regular third-party security audits
Why it's wrong here
Audits demonstrate good risk management, often reducing premium.
- ✗
Comprehensive security awareness training for all employees
Why it's wrong here
Training reduces risk and may lower premium.
- ✗
Implementation of multi-factor authentication across all systems
Why it's wrong here
Multi-factor authentication reduces risk, lowering premium.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CRISC question from scratch — 983 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.