Isaca CISM Quiz 293 Topic 3 Questions 1461-1465

Question: 1

Which of the following is the MOST effective mitigation strategy to protect confident information from inside threats?

ADefining segregation of duties

BPerforming an entitlement review process

CEstablishing authorization controls

DImplementing authentication mechanisms

Show Answer

Question: 2

In a large organization requesting outsourced services, which of the following contract clauses is MOST important to the information security manager?

ACompliance with security requirements

BFrequency of status reporting

CNondisclosure clause

DIntellectual property

Show Answer

Question: 3

An information security program should be established PRIMARILY on the basis of:

Athe approved information security strategy.

Bthe approved risk management approach.

Cdata security regulatory requirements.

Dsenior management input

Show Answer

Question: 4

Which of the following elements of risk is MOST difficult to quantify?

ACountermeasures

BAsset values

CThreats

Dvulnerabilities

Show Answer

Question: 5

An organization has detected sensitive data leakage caused by an employee of a third-party contractor. What is the BEST course of action to address this issue?

AActivate the organization's incident response plan.

BLimit access to the third-party contractor

CInclude security requirements in outsourcing contracts

DTerminate the agreement with the third-party contractor

Show Answer

Isaca CISM Quiz:293 Topic:3 Questions:1461-1465