Isaca CISM Quiz 39 Topic 1 Questions 191-195

Question: 1

Which of the following is the MOST effective way to address an organization's security concerns during contract negotiations with a third party?

ACommunicate security policy with the third-party vendor.

BEnsure security is involved in the procurement process.

CConduct an information security audit on the third-party vendor.

DReview the third-party contract with the organization's legal department.

Show Answer

Question: 2

What is the PRIMARY objective of performing a vulnerability assessment following a business system update?

AImprove the change control process.

BDetermine operational losses.

CUpdate the threat landscape.

DReview the effectiveness of controls

Show Answer

Question: 3

Senior management has launched an enterprise-wide initiative to streaming internal processes to reduce costs, including security processes. What should the information security manager rely on MOST

to allocate resources efficiently?

AReturn on investment (ROI)

BRisk classification

CCapability maturity assessment

DInternal audit reports

Show Answer

Question: 4

Which of the following should be an information security manager's PRIMARY focus during the development of a critical system storing highly confidential data?

AEnsuring the amount of residual risk is acceptable

BReducing the number of vulnerabilities detected

CComplying with regulatory requirements

DAvoiding identified system threats

Show Answer

Question: 5

Which of the following is BEST to include in a business case when the return on investment (ROI) for an information security initiative is difficult to calculate?

AProjected increase in maturity level

BEstimated increase in efficiency

CProjected costs over time

DEstimated reduction in risk

Show Answer

Isaca CISM Quiz:39 Topic:1 Questions:191-195