Isaca CISM Quiz 115 Topic 1 Questions 571-575

Question: 1

Due lo budget constraints, an internal IT application does not include the necessary controls to meet a client service level agreement (SLA). Which of the following is the information security manager's BEST course of action?

AInform the legal department of the deficiency

BAnalyze and report the issue to server management

CRequire the application owner to implement the controls.

DAssess and present the risks to the application owner

Show Answer

Question: 2

Which of the following is the MOST important step in risk ranking?

AThreat assessment

BMitigation cost

CVulnerability analysis

DImpact assessment

Show Answer

Question: 3

Which of the following is the BKT approach for an information security manager when developing new information security policies?

ACreate a stakeholder nap

BReference an industry standard.

CEstablish an information security governance committee

DDownload a policy template

Show Answer

Question: 4

When developing a new application, which of the following is the BEST approach to ensure compliance with security requirements?

AProvide security training for developers.

BPrepare detailed acceptance criteria

CAdhere to change management processes.

DPerform a security gap analysis.

Show Answer

Question: 5

Which of the following is MOST critical to review when preparing to outsource a data repository to a cloud-based solution?

ADisaster recovery plan

BIdentity and access management

CVendor's information security policy

DA risk assessment

Show Answer

Isaca CISM Quiz:115 Topic:1 Questions:571-575