hardMultiple SelectObjective-mapped
CRISC Practice Question: Which TWO risk identification techniques are most…
Which TWO risk identification techniques are most appropriate for identifying emerging risks from new technologies?
⚠ Common exam trap
A common mix-up: candidates choose historical incident review or peer benchmarking because they seem data-driven, but they fail to recognize that emerging technologies lack the historical data or peer maturity needed for these methods to be effective.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Scenario analysis
Scenario analysis is correct because it involves constructing plausible future states to explore how new technologies might introduce unforeseen risks, making it ideal for emerging technologies where historical data is absent. Threat intelligence feeds are correct because they provide real-time, external data on vulnerabilities, exploits, and attack patterns targeting new technologies, enabling proactive risk identification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Scenario analysis
Why this is correct
Scenario analysis explores potential future risks from new technologies.
- ✗
Historical incident review
Why it's wrong here
Historical review is backward-looking and may miss novel risks.
- ✗
Delphi technique
Why it's wrong here
Delphi technique gathers expert opinions but is less proactive for emerging risks.
- ✗
Peer benchmarking
Why it's wrong here
Benchmarking compares current state, not emerging risks.
- ✓
Threat intelligence feeds
Why this is correct
Threat intelligence provides current information on emerging threats.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CRISC question from scratch — 983 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.