Isaca CISM Quiz 137 Topic 1 Questions 681-685

Question: 1

Which of the following would provide the MOST helpful information when developing a prioritized list of IT assets to protect in the event of an incident?

AThe classification of the information processed by the IT asset

BThe service level agreement (SLA) for the IT asset

CThe owner of the IT asset

DThe replacement cost of the IT asset

Show Answer

Question: 2

An organization's operations have been significantly impacted by a cyber attack resulting in data loss. Once the attack has been contained, what should the security team.

APerform a root cause analysis.

BConduct a lessons learned exercise.

CImplement compensating controls.

DUpdate the incident response plan.

Show Answer

Question: 3

Which of the following is the PRIMARY objective of the incident management process?

ATo reduce the likelihood that security incidents will occur

BTo reduce the impact of security incidents on the business

CTo improve security incident response capabilities

DTo validate the organization's risk tolerance

Show Answer

Question: 4

Which of the following should an incident response team do NEXT after validating an event is an incident?

AContain the incident.

BIdentify the toot cause.

CInvoke the response plan.

DEscalate to management

Show Answer

Question: 5

Which of the following is the MOST effective way to ensure the development of an application system will align with organizational security standards?

ARisk assessment is performed in the early stages of the project

BThe system s business case includes required security controls.

COrganizational security standards are integrated with business objectives.

DVendor application security recommendations have been implemented.

Show Answer

Isaca CISM Quiz:137 Topic:1 Questions:681-685