Isaca CISM Quiz 276 Topic 2 Questions 1376-1380

Question: 1

Which of the following BEST enables an information security manager to communicate the capability of security program functions?

ASecurity maturity assessments

BSecurity architecture diagrams

CVulnerability scan results

DKey risk indicators (KRls)

Show Answer

Question: 2

Which is the BEST way for an organization to monitor security risk?

AAnalyzing key performance indicators (KPIs)

BUsing a dashboard to assess vulnerabilities

CUsing external risk intelligence services

DAnalyzing key risk indicators (KRIs)

Show Answer

Question: 3

Which of the following is the MOST effective way for an information security manager to protect the organization from misuse of social media?

ADeliver regular social media awareness training to all employees.

BHire a social media manager to control content delivered via social media.

CRestrict the use of social media on corporate networks and devices

DScan social media platforms for company references

Show Answer

Question: 4

An information security manager has discovered an external break-in to the corporate network Which of the following actions should be taken FIRST?

ASwitch on trace logging

BShut down the network

CCopy event logs to a different server

Disolate the affected portion of the network

Show Answer

Question: 5

The PRIMARY reason to classify information assets should be to ensure

Aproper ownership is established

Bproper access control

Csenior management buy-in

DInsurance valuation is appropriate.

Show Answer

Isaca CISM Quiz:276 Topic:2 Questions:1376-1380