Isaca CISM Quiz 157 Topic 2 Questions 781-785

Question: 1

In which of the following situations is it MOST important to escalate an incident response to senior management?

AThe owner of the affected business function is not available.

BThe time-related service levels for response are below risk threshold levels.

CThe impact of the incident exceeds the organization's risk tolerance.

DThe incident impacts a business-critical system.

Show Answer

Question: 2

A business unit has updated its long-term business plan to include a strategy of upgrading information management systems to increase productivity. To support this initiative, what should be the PRIMARY basis for updating the corresponding. information security strategy?

AThe information security framework

BThe business strategy

CThe IT strategy

DIT risk assessment results

Show Answer

Question: 3

Which of the following is the MOST effective way to ensure the information security risk associated with third-party services is addressed?

APerform a risk assessment on the services.

BConduct a security test of the services prior to implementation.

CInclude appropriate security requirements in the contract.

DProvide security awareness training to third-party employees.

Show Answer

Question: 4

Which of the following is the PRIMARY product of a business impact analysis (BIA)?

AWell-defined incident escalation procedures

BA heat map of business risk scenarios

CPrioritization of vulnerabilities for remediation

DPrioritization of assets for business recovery

Show Answer

Question: 5

Which of the following is the BEST way to prevent segregation of duties violations?

AReview access logs for violations.

BEnable data encryption with strong keys.

CImplement role-based access.

DImplement an identity management system.

Show Answer

Isaca CISM Quiz:157 Topic:2 Questions:781-785