Isaca CISM Quiz 142 Topic 1 Questions 706-710

Question: 1

When preparing a disaster recovery plan, which of the following would BEST help in prioritizing the restoration of business systems?

ARecovery time objective (RTO)

BAnnual loss expectancy (ALE)

CService level agreement (SLA)

DSystem utilization requirements

Show Answer

Question: 2

Which of the following BEST indicates that an information security strategy is aligned to the business strategy?

AAn effective information security steering committee

BAn adequately funded security budget

CA fully staffed security operations center (SOC)

DEffective information security controls organization-wide

Show Answer

Question: 3

An organization planning to contract with a cloud service provider is concerned about the risk of account hijacking at login. What is MOST important for the organization in its security requirements to address this concern?

ACreate unique login credentials for each user.

BUtilize encryption for account logins.

CUtilize multi-factor authentication

DRotate account passwords regularly.

Show Answer

Question: 4

An information security manager is planning to purchase a mobile device management (MDM) system to manage personal devices used by employees to access corpor Which of the following is MOST important to include in the business case?

AInformation security-related metrics

BCost-benefit analysis

CIndustry best practice benchmarking results

DIdentified risks and mitigating controls

Show Answer

Question: 5

Which of the following should an information security manager do FIRST when developing a communication plan to support incident management?

AAssess the security risks associated with communication.

BDetermine who will execute the communication plan.

CDraft incident communication templates.

DIdentify internal and external parties.

Show Answer

Isaca CISM Quiz:142 Topic:1 Questions:706-710