hardMultiple SelectObjective-mapped
CRISC Practice Question: Which TWO of the following are valid techniques…
Which TWO of the following are valid techniques for identifying risk in IT risk assessment?
⚠ Common exam trap
A common mix-up: candidates confuse risk identification techniques (like SWOT and brainstorming) with risk analysis or evaluation techniques (like residual risk assessment, risk aggregation, and Monte Carlo simulation), which are applied after risks have already been identified.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SWOT analysis
SWOT analysis (Strengths, Weaknesses, Opportunities, Threats) is a structured technique used to identify both internal and external risk factors during IT risk assessment. It helps uncover threats that could exploit weaknesses, as well as opportunities that might mitigate risks, making it a valid identification method.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
SWOT analysis
Why this is correct
SWOT helps identify strengths, weaknesses, opportunities, and threats.
- ✓
Brainstorming sessions
Why this is correct
Brainstorming is a qualitative technique to identify risks.
- ✗
Residual risk assessment
Why it's wrong here
Residual risk is evaluated after controls are applied.
- ✗
Risk aggregation
Why it's wrong here
Risk aggregation combines risks, not identifies them.
- ✗
Monte Carlo simulation
Why it's wrong here
Monte Carlo is used for quantitative analysis, not identification.
Go deeper
Related to this question
About these practice questions
One of 983 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.