Isaca CISM Quiz 160 Topic 1 Questions 796-800

Question: 1

Which of the following is an example of a vulnerability?

ADefective software

BNatural disasters

CUnauthorized users

DRansomware

Show Answer

Question: 2

The risk of mishandling alerts identified by an intrusion detection system (lDS) would be the GREATEST when:

Aoperations and monitoring are handled by different teams.

BThe IT infrastructure is diverse.

CIDS sensors are misconfigured.

Dstandard operating procedures are not formalized.

Show Answer

Question: 3

An information security manager is asked to provide evidence that the organization is fulfilling its legal obligation to protect personal identifiable information (Pll). Which of the f<

AMetrics related to program effectiveness

BWritten policies and standards

CPrivacy awareness training

DRisk assessments of privacy-related applications

Show Answer

Question: 4

Which of the following is MOST important for an information security manager to regularly report to senior

management?

AResults of penetration tests

BAudit reports

CImpact of unremediated risks

DThreat analysis reports

Show Answer

Question: 5

An information security manager has observed multiple exceptions for a number of different security controls. Which of the following should be the information security manager's FIRST course of action?

AReport the noncompliance to the board of directors.

BPrioritize the risk and implement treatment options.

CInform respective risk owners of the impact of exceptions.

DDesign mitigating controls for the exceptions.

Show Answer

Isaca CISM Quiz:160 Topic:1 Questions:796-800