Isaca CISM Quiz 211 Topic 2 Questions 1051-1055

Question: 1

A third-party service provider is developing a mobile app for an organization's customers. Which of the following issues should be of GREATEST concern to the information security management.

ASoftware escrow is not addressed in the contract

BThe contract has no requirement for secure development practices

CThe mobile app s programmers are all offshore contractors.

DSLAs after deployment are not clearly defined.

Show Answer

Question: 2

Risk management is MOST cost-effective;

Awhen performed on a continuous basis.

Bat the beginning of security program development

Cwhile developing the business case for the security program

Dwhen integrated into other corporate assurance functions.

Show Answer

Question: 3

Which of the following defines the triggers within a business continuity plan (BCP)?

ANeeds of the organization

BGap analysis

CDisaster recovery plan

DInformation security policy

Show Answer

Question: 4

Which of the following is the MOST important reason to document information security incidents that are reported across the organization?

APrevent incident recurrence.

BIdentify unmitigated risk.

CSupport business investments in security

DEvaluate the security posture of the organization.

Show Answer

Question: 5

After undertaking a security assessment of a production system, the information security manager is MOST likely to:

Ainform the system owner of any residual risks and propose measures to reduce them.

Bestablish an overall security program that minimizes the residual risks of that production system

Cinform the IT manager of the residual risks and propose measures to reduce them.

Dinform the development team of any residual risks and together formulate risk reduction measures.

Show Answer

Isaca CISM Quiz:211 Topic:2 Questions:1051-1055