Isaca CISM Quiz 297 Topic 2 Questions 1481-1485

Question: 1

An employee used network logon credentials on a personal shopping site. The site was breached, resulting in an unauthorized person logging onto the network with the employee's credentials via remote access. What is the BEST recommendation to prevent recurrence of similar unauthorized logins?

AImplement security awareness training.

BRecommend two-factor authentication for remote access.

CBlock access to shopping sites from the network.

DCreate policies against using logon credentials for personal use

Show Answer

Question: 2

Which of the following would be the BEST evidence to present to senior management in favor of continuing a

successful investment in an organization's information security awareness program?

AAn increase in reported incidents

BA decrease in reported incidents

CTotal number of employees that passed training quizzes

DAn increase in the number of awareness training attendees

Show Answer

Question: 3

Which of the following is the BEST way to address risk associated with using an outsourced technology

service provider?

AReview cyber liability insurance.

BPerform due diligence on the provider at contract time.

CRequire management approval for vendor selection.

DImplement a vendor management program

Show Answer

Question: 4

An organization is considering the adoption of cloud service providers for its expanding global business

operations. Which of the following is MOST important for the information security manager to review with

regard to data protection?

AData privacy policy

BOrganizational requirements

CLocal laws and regulations

DSecurity policy and standards

Show Answer

Question: 5

Which of the following is the MOST effective way to motivate staff members to fulfill their information security responsibilities?

AIntegrate information security responsibilities into staff annual performance goals.

BProvide regular information security awareness training followed by quizzes.

CAudit the staffs actions based on their responsibilities.

DInclude information security responsibilities in staff job descriptions

Show Answer

Isaca CISM Quiz:297 Topic:2 Questions:1481-1485