Isaca CISM Quiz 146 Topic 2 Questions 726-730

Question: 1

Which of the following is the MOST important consideration when designing information security architecture?

ARisk management parameters for the organization are defined.

BThe information security architecture is aligned with industry standards.

CThe level of security supported is based on business decisions.

DThe existing threat landscape is monitored.

Show Answer

Question: 2

Which of the following is MOST useful to include in a report to senior management on a regular basis to demonstrate the effectiveness of the information security program?

AKey risk indicators (KRIs)

BCapability maturity models

CKey performance indicators (KPls)

DCritical success factors (CSFs)

Show Answer

Question: 3

An organization implemented a mandatory information security awareness training program a year ago. What is the BEST way to determine its effectiveness?

AAnalyze findings from previous audit reports

BAnalyze results from training completion reports.

CAnalyze responses from an employee survey on training satisfaction

DAnalyze results of a social engineering test

Show Answer

Question: 4

Which of the following is the MOST relevant source of information for determining the available internal human resources for executing the information security program?

ARoles and responsibilities matrix

BJob descriptions

CSkills inventory

DRACl chart

Show Answer

Question: 5

It is MOST important tot an information security manager to ensure that security risk assessments are performed:

AIn response to the threat landscape,

Bduring a root cause analysis

Cconsistently throughout the enterprise.

Das part of the security business case

Show Answer

Isaca CISM Quiz:146 Topic:2 Questions:726-730