Isaca CISM Quiz 236 Topic 3 Questions 1176-1180

Question: 1

Which of the following security controls should be integrated FIRST into procurement processes to improve the security of the services provided by suppliers'?

APerforming risk assessments to identify security concerns

BConducting penetration testing to identify security vulnerabilities

CPerforming regular security audits to determine control deficiencies

DCreating service contract templates to include security provisions

Show Answer

Question: 2

An awareness program is implemented to mitigate the risk of infections introduced through the use of social media Which of the following will BEST determine the effectiveness of the awareness program''

AEmployee attendance rate at the awareness program

BA simulated social engineering attack

CA post-awareness program survey

DA quiz based on the awareness program materials

Show Answer

Question: 3

An information security manager is reviewing the organization's incident response policy affected by a proposed public cloud integration. Which of the following will be the MOST difficult to resolve with the cloud service provider?

AObtaining physical hardware for forensic analysis

BRegular testing of incident response plan

CDefining incidents and notification criteria

DAccessing information security event data

Show Answer

Question: 4

A risk has been formally accepted and documented. Which of the following is the MOST important action for an information security manager?

AUpdate risk tolerance levels.

BNotify senior management and the board.

CMonitor the environment for changes

DRe-evaluate the organization's risk appetite

Show Answer

Question: 5

An organizations ability to prevent a security incident In a Software as a Service (SaaS) cloud-com puling environment is MOST dependent on the:

Aability to implement a web application firewall.

Bability to monitor and analyze system logs

Cconfiguration and sensitivity of an intrusion detection system (IDS)

Dgranularity with which access rights can be configured

Show Answer

Isaca CISM Quiz:236 Topic:3 Questions:1176-1180