Isaca CISM Quiz 198 Topic 1 Questions 986-990

Question: 1

Which of the following is the BEST way to determine if an organization's current risk level is within the risk appetite?

AImplementing key risk indicators (KRIs)

BConducting a business impact analysis (BIA)

CImplementing key performance indicators (KPIs)

DDeveloping additional mitigating controls

Show Answer

Question: 2

Which of the following is the MOST effective way to ensure the process for granting access to new employees is standardized and meets organizational security requirements?

AAdopt a standard template of access levels for all employees to be enacted upon hiring.

BEmbed the authorization and creation of accounts with HR onboarding procedures.

CRequire managers of new hires be responsible for account setup and access during employee orientation.

DGrant authorization to individual systems as required with the approval of information security management.

Show Answer

Question: 3

Following a malicious security incident, an organization has decided to prosecute those responsible. Which of the following will BEST facilitate the forensic investigation?

AIdentifying the affected environment

BPerforming a backup of affected systems

CDetermining the degree of loss

DMaintaining chain of custody

Show Answer

Question: 4

Which of the following will BEST enable an effective information asset classification process?

AIncluding security requirements in the classification process

BAnalyzing audit findings

CAssigning ownership

DReviewing the recovery time objective (RTO) requirements of the asset

Show Answer

Question: 5

Which of the following is the PRIMARY reason for performing an analysis of the threat landscape on a regular basis?

ATo determine if existing business continuity plans are adequate

BTo determine the basis for proposing an increase in security budgets

CTo determine if existing vulnerabilities present a risk

DTo determine critical information for executive management

Show Answer

Isaca CISM Quiz:198 Topic:1 Questions:986-990