Isaca CISA Quiz 240 Topic 2 Questions 1196-1200

Question: 1

An IS auditor reviewing the risk assessment process of an organization should FIRST:

Aidentify the reasonable threats to the information assets.

Banalyze the technical and organizational vulnerabilities.

Cidentify and rank the information assets.

Devaluate the effect of a potential security breach.

Show Answer

Question: 2

An IS auditor is reviewing an IT security risk management program. Measures of security risk should:

Aaddress all of the network risks.

Bbe tracked over time against the IT strategic plan.

Ctake into account the entire IT environment.

Dresult in the identification of vulnerability tolerances.

Show Answer

Question: 3

Which of the following should be considered FIRST when implementing a risk management program?

AAn understanding of the organization's threat, vulnerability and risk profile

BAn understanding of the risk exposures and the potential consequences of compromise

CA determination of risk management priorities based on potential consequences

DA risk mitigation strategy sufficient to keep risk consequences at an acceptable level

Show Answer

Question: 4

As a driver of IT governance, transparency of IT's cost, value and risks is primarily achieved through:

Aperformance measurement.

Bstrategic alignment.

Cvalue delivery.

Dresource management.

Show Answer

Question: 5

Which of the following should be the MOST important consideration when deciding areas of priority for IT governance implementation?

AProcess maturity

BPerformance indicators

CBusiness risk

DAssurance reports

Show Answer

Isaca CISA Quiz:240 Topic:2 Questions:1196-1200