Isaca CISM Quiz 304 Topic 3 Questions 1516-1520

Question: 1

Which of the following is a potential indicator of inappropriate Internet use by staff?

AIncreased reports of slow system performance

BIncreased number of weaknesses from vulnerability scans

CIncreased help desk calls for password resets

DReduced number of pings on firewalls

Show Answer

Question: 2

Which of the following BEST indicates that an organization can respond to incidents in a timely manner?

AThe organization conducts walk-through exercises for incident response.

BThe incident response plan has been endorsed by management.

CAdequate financial resources are available for the response team.

DNo audit issues were identified with the incident response plan.

Show Answer

Question: 3

Which of the following is MOST helpful in securing funding for a commercial vulnerability assessment tool?

APresenting a vulnerability scan report for current business systems

BDeveloping security metrics linked to business objectives

CExplaining the business value of vulnerability remediation

DIdentifying applicable legal and regulatory requirements

Show Answer

Question: 4

Which of the following is MOST important to ensuring an incident response team has the necessary authorization to perform its role?

ASenior management representation on the team

BLegal counsel representation on the team

CApproved job descriptions outlining member responsibilities

DA charter endorsed by the security steering committee

Show Answer

Question: 5

An information security manager is planning to purchase a mobile device management (MDM) system to manage personal devices used by employees to access corporate email. Which of the following is MOST important to include in the business case?

ACost-benefit analysis

BIndustry best practice benchmarking results

CIdentified risks and mitigating controls

DInformation security-related metrics

Show Answer

Isaca CISM Quiz:304 Topic:3 Questions:1516-1520