Isaca CISM Quiz 158 Topic 1 Questions 786-790

Question: 1

Which of the following is MOST important for an information security manager to ensure is included in a business case for a new security system?

ARisk reduction associated with the system

BBenchmarking results

CEffectiveness of controls

DAudit-logging capabilities

Show Answer

Question: 2

Which of the following is the MOST effective approach to communicate general information security responsibilities across an organization?

ARequire staff to sign confidentiality agreements.

BProvide regular security awareness training.

CDevelop a RAO matrix for the organization.

DSpecify information security responsibilities in job descriptions.

Show Answer

Question: 3

The integration of information security risk management processes within corporate risk management processes will MOST likely result in:

Asenior management approval of the information security budgets.

Bimproved efficiencies of security operations.

Cinformation security controls that reduce enterprise risk.

Dmore effective security risk management processes.

Show Answer

Question: 4

Which of the following provides the BEST preparation for handling the breach of a corporate web site?

AIncident response testing

BReview of cyber liability insurance coverage

CDocumented data recovery procedures

DWeb server penetration testing

Show Answer

Question: 5

Which of the following is the PRIMARY benefit of using a tabletop method to conduct an incident response exercise?

APotential impact to business operations is minimized.

BThe impact of IT systems on business operations is quantified.

CThe readiness of applications for testing is ensured.

DVisibility into personnel effectiveness is increased.

Show Answer

Isaca CISM Quiz:158 Topic:1 Questions:786-790