Isaca CISM Quiz 151 Topic 1 Questions 751-755

Question: 1

An organization establishes an internal document collaboration site. To ensure data confidentiality of each project group, it is MOST important to:

Aperiodically recertify access rights

Bconduct a vulnerability assessment

Cenforce document life cycle management.

Dprohibit remote access to the site.

Show Answer

Question: 2

Which of the following tools BEST demonstrates the effectiveness of the information security program?

AKey risk indicators (KRls)

BA security balanced scorecard

CRisk heat map

DManagement satisfaction surveys

Show Answer

Question: 3

An information security manager reads a media report of a new type of malware attack. Who should be notified FIRST'

ASecurity operations team

BApplication owners

CData owners

DCommunications department

Show Answer

Question: 4

Which of the following is the BEST approach for determining the maturity level of an information security program?

AEngage a third-party review.

BReview internal audit results.

CEvaluate key performance indicators (KPls).

DPerform a self-assessment.

Show Answer

Question: 5

In the absence of technical controls, what would be the BEST way to reduce unauthorized text messaging on company-supplied mobile devices?

AUpdate the corporate mobile usage policy to prohibit texting.

BConduct a business impact analysis (BIA) and provide the report to management

CInclude the topic of prohibited texting in security awareness training.

DStop providing mobile devices until the organization is able to implement controls.

Show Answer

Isaca CISM Quiz:151 Topic:1 Questions:751-755