Isaca CISM Quiz 215 Topic 1 Questions 1071-1075

Question: 1

The head of a department affected by a recent security incident expressed concern about not being aware of the actions taken to resolve the incident. Which of the following is the BEST way to address this issue?

ARequire management approval of the incident response plan.

BEnsure better identification of incidents in the incident response plan.

CDiscuss the definition of roles in the incident response plan.

DDisseminate the incident response plan throughout the organization.

Show Answer

Question: 2

To ensure IT equipment meets organizational security standards, the MOST efficient approach is to:

Aassess security during equipment deployment.

Bensure compliance during user acceptance testing.

Cdevelop an approved equipment list.

Dassess the risks of all new equipment.

Show Answer

Question: 3

Which of the following is MOST important for effective communication during incident response?

AEstablishing a mean time to resolve (MTTR) metric

BMaintaining a relationship with media and law enforcement

CMaintaining an updated contact list

DEstablishing a recovery time objective (RTO)

Show Answer

Question: 4

An organization is planning to open a new office in another country. Sensitive data will be routinely sent between the two offices. What should be the information security manager s FIRST course of action?

AApply the current corporate security policies to the new office.

BEncrypt the data for transfer to the head office based on security manager approval

CUpdate privacy policies to include the other country's laws and regulations.

DIdentify applicable regulatory requirements to establish security policies

Show Answer

Question: 5

When developing a new system, detailed information security functionality should FIRST be addressed:

Aduring the system design phase.

Bas part of prototyping.

Cas part of application development.

Dwhen system requirements are defined.

Show Answer

Isaca CISM Quiz:215 Topic:1 Questions:1071-1075