Isaca CISM Quiz 218 Topic 1 Questions 1086-1090

Question: 1

Which of the following provides the BEST evidence that the information security program is aligned to the business strategy?

AInformation security initiatives are directly correlated to business processes.

BThe information security team is able to provide key performance indicators (KPIs) to senior management.

CBusiness senior management supports the information security policies.

DThe information security program manages risk within the business1* risk tolerance.

Show Answer

Question: 2

An organization has determined that one of its web servers has been compromised. Which of the following actions should be taken to preserve the evidence of the intrusion for forensic analysis and potential litigation?

ARun analysis tools to detect the source of the intrusion.

BReboot the server in a secure area to search for digital evidence.

CUnplug the server from the power.

DRestrict physical and logical access to the server.

Show Answer

Question: 3

Which of the following is the FIRST step required to achieve effective performance measurement?

ASelect and place sensors.

BDefine meaningful metrics.

CValidate and calibrate metrics.

DImplement control objectives.

Show Answer

Question: 4

Which of the following devices, when placed in a demilitarized zone (DMZ). would be considered a significant exposure?

AAuthentication server

BWeb server

CProxy server

DIntrusion detection server

Show Answer

Question: 5

When considering whether to adopt a new information security framework, an organization's information security manager should FIRST:

Aperform a financial viability study.

Bcompare the framework with the current business strategy.

Cperform a technical feasibility analysis.

Danalyze the framework's legal implications and business impact.

Show Answer

Isaca CISM Quiz:218 Topic:1 Questions:1086-1090