Isaca CISM Quiz 4 Topic 1 Questions 16-20

Question: 1

In a call center, the BEST reason to conduct a social engineering exercise is to:

Again funding (or information security initiatives.

Bminimize the likelihood of successful attacks.

Cimprove password policy.

Didentify candidates for additional security training.

Show Answer

Question: 2

An organization has purchased an Internet sales company to extend the sales department. The information security manager's FIRS'F?ter defense? the security policy framework encompasses the new business model is to:

Aperform a gap analysis.

Bmerge both companies' policies.

Cperform a vulnerability assessment.

Dimplement both companies' policies separately.

Show Answer

Question: 3

Which of the following is the BEST method for determining whether a firewall has been configured to provide a comprehensive perimeter defense?

AA simulated denial of service (DoS) attack against the firewall

BA validation of the current firewall rule set

CA port scan of the firewall from an internal source

DA ping test from an external source

Show Answer

Question: 4

Which of the following analyses will BEST identify the external influences to an organization's information security?

AVulnerability analysis

BThreat analysis

CBusiness impact analysis (BIA)

DGap analysis

Show Answer

Question: 5

Which of the following is the MOST Important outcome of a post-Incident review?

AThe person responsible for the incident Is identified.

BThe root cause of the Incident Is determined.

CThe system affected by the Incident is restored to its prior state.

DThe impact of the incident is reported to senior management.

Show Answer

Isaca CISM Quiz:4 Topic:1 Questions:16-20