Isaca CISM Quiz 220 Topic 2 Questions 1096-1100

Question: 1

When implementing security architecture, an information security manager MUST ensure that security controls:

Aare the least expensive.

Bare transparent.

Care communicated through security policies.

Dform multiple barriers against threats.

Show Answer

Question: 2

When integrating information security requirements into software development, which of the following practices should be FIRST in the development lifecycle?

APenetration testing

BSource code review

CDynamic code analysis

DThreat modeling

Show Answer

Question: 3

Which of the following BEST demonstrates alignment between information security governance and corporate governance?

AAverage number of security incidents across business units

BNumber of vulnerabilities identified for high-risk information assets

CSecurity project justifications provided in terms of business value

DMean time to resolution for enterprise-wide security incidents

Show Answer

Question: 4

Which of the following should be the FIRST step of incident response procedures?

AEvaluate the cause of the control failure.

BPerform a risk assessment to determine the business impact.

CIdentify if there is a need for additional technical assistance.

DClassify the event depending on seventy and type.

Show Answer

Question: 5

Management is questioning the need for several items in the information security budget proposal. Which of the following would have been MOST helpful prior to budget submission?

ABenchmarking information security efforts of industry competitors

BObtaining better pricing from information security service vendors

CPresenting a report of current threats to the organization

DEducating management on information security best practices

Show Answer

Isaca CISM Quiz:220 Topic:2 Questions:1096-1100