Isaca CISM Quiz 314 Topic 3 Questions 1566-1570

Question: 1

Which of the following should an information security manager consider when reviewing an existing security investment plan?

AThe plan is based on a review of threats. and vulnerabilities in existing IT systems.

BThe plan focuses on meeting industry best practices and industry standards.

CThe plan identifies all potential threats and their impact on business processes

DThe plan has summarized IT costs for implementation.

Show Answer

Question: 2

Which of the following is the GREATEST benefit of an information security architecture?

ACloser integration with the incident response team function

BAlignment with industry best practices

CEase of integration between different security components

DFewer false positives in the security incident and event management (SIEM)

Show Answer

Question: 3

What should an information security manager do FIRST upon learning of a significant regulatory change that impacts how the organization should safeguard critical data?

APerform a gap analysis.

BReport the regulatory change to senior management

CImplement needed control changes.

DAssess impact to industry peers.

Show Answer

Question: 4

Which of the following should be done FIRST when implementing an information security strategy?

AMap business goals to information security strategy objectives.

BBenchmark the strategy with industry peers.

CIdentify owners of information assets

DDetermine the desired state of information security.

Show Answer

Question: 5

Which of the following is the BEST method for determining whether new risks exist in legacy systems?

ARegularly scheduled security audits

BRegularly scheduled risk assessments

CFrequent updates to the risk register

DAutomated vulnerability scans

Show Answer

Isaca CISM Quiz:314 Topic:3 Questions:1566-1570