Isaca CISM Quiz 275 Topic 2 Questions 1371-1375

Question: 1

Which of the following is the BEST way to define responsibility for information security throughout an organization?

APolicies

BStandards

CGuidelines

DTraining

Show Answer

Question: 2

Which of the following factors is MOST likely to increase the chances of a successful social engineering attack?

ATechnical skills

BPotential financial gain

CKnowledge of internal procedures

DWeak authentication for remote access

Show Answer

Question: 3

What should be the PRIMARY basis for defining the appropriate level of access control to information assets?

ABusiness needs

BManagement requests

CAudit findings

DCompensating controls

Show Answer

Question: 4

Which of the following is MOST important to consider when defining control objectives?

AThe current level of residual risk

BThe organization's risk appetite

CControl recommendations from a recent audit

DThe organization's strategic objectives

Show Answer

Question: 5

Which of the following would be the BEST way for a company to reduce the risk of data loss resulting from employee-owned devices accessing the corporate email system?

ALink the bring-your-own-device (BYOD) policy to the existing staff disciplinary policy.

BRequire employees to undergo training before permitting access to the corporate email service

CRequire employees to install a reputable mobile anti-virus solution on their personal devices.

DUse a mobile device management (MDM) solution to isolate the local corporate email storage.

Show Answer

Isaca CISM Quiz:275 Topic:2 Questions:1371-1375