hardMultiple SelectObjective-mapped
CRISC Practice Question: Which TWO of the following are characteristics of…
Which TWO of the following are characteristics of quantitative risk analysis compared to qualitative risk analysis? (Select 2)
⚠ Common exam trap
A common mix-up: candidates confuse 'easier to communicate' with quantitative analysis because numbers seem objective, but in reality, qualitative ratings are usually simpler for non-technical audiences to grasp without specialized training.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It produces results in monetary values or percentages
Quantitative risk analysis uses numerical data to assign monetary values or percentages to risk components such as asset value, exposure factor, and annualized loss expectancy. This allows for precise, data-driven comparisons and prioritization of risks based on financial impact.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It is always easier to communicate to non-technical stakeholders
Why it's wrong here
Quantitative risk analysis relies on numerical data and statistical modelling, such as Monte Carlo simulations or annual loss expectancy calculations, which often produce complex probability distributions that require technical literacy to interpret. Non-technical stakeholders typically find qualitative ordinal scales (e.g., “high/medium/low”) more intuitive. The option is tempting because quantitative outputs like monetary figures can appear concrete, and in a scenario where stakeholders are financially literate and demand hard numbers for budget justification, quantitative results would indeed be the correct choice.
- ✓
It produces results in monetary values or percentages
Why this is correct
Quantitative outputs are numerical, e.g., ALE, SLE.
- ✓
It supports cost-benefit analysis of controls
Why this is correct
Quantitative data allows comparing control costs with risk reduction.
- ✗
It requires less specialized expertise to perform
Why it's wrong here
Quantitative often requires more statistical expertise.
- ✗
It relies solely on expert judgment without numerical data
Why it's wrong here
That describes qualitative analysis.
Go deeper
Related to this question
About these practice questions
This CRISC question is part of Courseiva's 983-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.