Isaca CISM Quiz 245 Topic 2 Questions 1221-1225

Question: 1

Which of the following would MOST likely require a business continuity plan to be invoked?

AAn unauthorized visitor discovered in the data center

BA distributed denial of service attack on an email server

CAn epidemic preventing staff from performing job functions

DA hacker holding personally identifiable information hostage

Show Answer

Question: 2

The MOST effective way to determine the resources required by internal Incident response teams is to

Adetermine the scope and charter of incident response

Brequest guidance (rom incident management consultants.

Cbenchmark against other incident management programs

Dtest response capabilities with event scenarios.

Show Answer

Question: 3

Which of the following is the BEST reason for delaying the application of a critical security patch?

AConflicts with software development life cycle

BResource limitations

CLack of vulnerability management

DTechnology interdependences

Show Answer

Question: 4

Which of the following should be the PRIMARY input when defining the desired state of security within an organization?

AAcceptable risk level

BAnnual loss expectancy

CExternal audit results

DLevel of business impact

Show Answer

Question: 5

Communicating which of the following would be MOST helpful to gain senior management support for risk treatment options?

Aindustry benchmarks

BThreat analysis

CRoot cause analysis

DQuantitative loss

Show Answer

Isaca CISM Quiz:245 Topic:2 Questions:1221-1225