Isaca CISM Quiz 230 Topic 3 Questions 1146-1150

Question: 1

Which of the following is MOST effective in reducing the financial impact following a security breach leading to data disclosure9

AAn incident response plan

BBackup and recovery strategy

CA data loss prevention (DLP) solution

DA business continuity plan (BCP)

Show Answer

Question: 2

An incident was detected where customer records were altered without authorization. The GREATEST concern for forensic analysis would be that the log data:

Ahas been disclosed.

Bcould be temporarily available.

Cmay not be time-synchronized.

Dmay be modified.

Show Answer

Question: 3

An online payment provider's computer security incident response team has confirmed that a customer credit card database was breached. Which of the following would be MOST important to include in a report to senior management?

AA summary of the security togs illustrating the sequence of events

BA business case for implementing stronger logical access controls

CAn explanation of the potential business impact

DAn analysis of similar attacks and recommended remediation

Show Answer

Question: 4

Which of the following is the BEST evidence of an effectively designed key risk indicator (KRI)?

AThe KRI is quantitative

BThe KRI measures inherent risk.

CThe KRI predicts threats

DThe KRI incorporates risk appetite

Show Answer

Question: 5

Which of the following should cause the GREATEST concern for an information security manager reviewing the effectiveness of an intrusion prevention system (IDS)?

ADecrease in false positives

BIncrease in false negatives

CDecrease in malicious packets

DIncrease in crossover error rate

Show Answer

Isaca CISM Quiz:230 Topic:3 Questions:1146-1150