Isaca CISM Quiz 164 Topic 1 Questions 816-820

Question: 1

For proper escalation of events, it is MOST important for the information security manager to ensure:

Athe incident team is adequately staffed.

Bincident severity levels are defined.

Cthe incident response plan is approved.

Dincident documentation templates are created.

Show Answer

Question: 2

Which of the following is the PRIMARY advantage of having an established information security governance framework in place when an organization is adopting emerging technologies?

AA cost-benefit analysis process would be easier to perform.

BAn emerging technologies strategy would be in place.

CEnd-user acceptance of emerging technologies has been established.

DAn effective security risk management process is established.

Show Answer

Question: 3

Business applications should be selected for disaster recovery testing on the basis of:

Arecovery time objectives (RTOs).

Bthe number of failure points that are being tested.

Cthe results of contingency desktop checks.

Dcriticality to the enterprise.

Show Answer

Question: 4

Which of the following would provide the MOST comprehensive view of the effectiveness of the information security function within an organization?

AAn incident reporting system

BExamples of compliance with security processes

CA balanced scorecard

DAn interview with senior managers

Show Answer

Question: 5

Which of the following is the responsibility of a data owner?

AMaintaining the integrity of the database

BInvestigating and resolving suspicious database activity

CClassifying the data in accordance with security policy

DTesting to determine whether the data can be recovered successfully

Show Answer

Isaca CISM Quiz:164 Topic:1 Questions:816-820