Isaca CISM Quiz 127 Topic 2 Questions 631-635

Question: 1

Which of the following BEST contributes to the successful management of security incidents?

ACurrent technologies

BTested controls

CEstablished procedures

DEstablished policies

Show Answer

Question: 2

With limited resources in the information security department which of the following is the BEST approach for managing security risk?

AImplement technical solutions to automate security management activities.

BHire additional information security staff.

CEngage a third-party company to provide security support.

DPrioritize security activities and report to management

Show Answer

Question: 3

An organization involved in e-commerce activities operating from its home country opened a new office in another country wit! stringent security laws. In this scenario, the overall security strategy should be based on:

Ainternational security standards.

Brisk assessment results.

Cthe most stringent requirements.

Dthe security organization structure

Show Answer

Question: 4

Which of the following should be the PRIMARY factor in prioritizing responses to a security incident?

ACost of mitigation

BInherent cost of assets

CAsset classification

DIncident location

Show Answer

Question: 5

Which of the following would BEST help to ensure an organization s security program is aligned with business objectives?

AProject managers receive annual information security awareness training.

BThe organization's board of directors includes a dedicated information security specialist

CSecurity policies are reviewed and approved by the chief information officer.

DThe security strategy it reviewed and approved by the organization s executive committee.

Show Answer

Isaca CISM Quiz:127 Topic:2 Questions:631-635