Isaca CISM Quiz 231 Topic 3 Questions 1151-1155

Question: 1

During the establishment of a service level agreement (SLA) with a cloud service provider, it is MOST important for the information security manager to:

Aunderstand the cloud storage architecture in use to determine security risk.

Bensure security requirements are contractually enforceable.

Cupdate the security policy to reflect the provider's terms of service.

Dset up proper communication paths with the provider.

Show Answer

Question: 2

Which of the following would be MOST important to include in a bring your own device (BYOD) policy with regard to lost or stolen devices? The need for employees to:

Aseek advice from the mobile service provider

Binitiate the company's incident reporting process

Cnotify local law enforcement.

Drequest a remote wipe of the device

Show Answer

Question: 3

An online trading company discovers that a network attack has penetrated the firewall What should be the information security manager's FIRST response?

AImplement mitigating controls

BExamine firewall logs to identity the attacker

CNotify the regulatory agency of the incident

DEvaluate the impact to the business.

Show Answer

Question: 4

An organization establishes an internal document collaboration site. To ensure data confidently of each project group, it is MOST important to:

AProhibit remote access to the site

BPeriodically recertify access rights.

CConduct vulnerability assessment

DEnforce document life cycle management

Show Answer

Question: 5

Which of the following would be MOST helpful to an information security manager tasked with enforcing enhanced password standards?

AImplementing technical password controls to include strong complexity

BConducting password strength testing

CReeducating end users on creating strong, complex passwords

DImplementing a centralized identity management system

Show Answer

Isaca CISM Quiz:231 Topic:3 Questions:1151-1155