Isaca CISM Quiz 274 Topic 1 Questions 1366-1370

Question: 1

Which of the following provides the GREATEST assurance that existing controls meet compliance requirements?

APerforming independent tests

BEvaluating metrics

CPerforming a risk assessment

DReviewing policies

Show Answer

Question: 2

Conducting a cost-benefit analysis for a security investment is important because it

Asupports asset classification.

Bquantifies return on security investment

Csupports justification for expenditure.

Dquantifies residual risk

Show Answer

Question: 3

Several identified risks have been mitigated to an acceptable level with appropriate controls Which of the following activities would BEST help to maintain acceptable risk levels?

AFrequent assessments of inherent risks

BPeriodic reviews of changes to the environment

CPeriodic cost-benefit analyses of the implemented controls

DFrequent assessments of risks action plans

Show Answer

Question: 4

The MOST important objective of monitoring key risk indicators (KRIs) related to information security is to:

Aminimize loss from security incidents.

Bidentify change in security exposures.

Creduce risk management costs

Dmeet regulatory compliance requirements.

Show Answer

Question: 5

Which of the following is the STRONGEST indication that senior management commitment to information security is lacking within an organization?

AInconsistent enforcement of information security policies

BA high level of information security risk acceptance

CA reduction in information security investment

DThe information security manager reports to the chief risk officer

Show Answer

Isaca CISM Quiz:274 Topic:1 Questions:1366-1370