Isaca CISM Quiz 321 Topic 3 Questions 1601-1605

Question: 1

An organization has acquired a company that manufactures Internet of Things (loT) devices What should the information security manager do NEXT?

AUpdate the information security strategy

BReview the acquired company's data sharing agreements

CReview the acquired company's audit reports

DConduct a vulnerability assessment

Show Answer

Question: 2

For workstations used to facilitate a forensic investigation it is MOST important to ensure:

Athe workstations are backed up and hardened on a regular basis

Bthe workstations are only accessed by members of the forensics team

Ca documented chain of custody log is kept for the workstations

Donly forensics-related software Is installed on the workstations

Show Answer

Question: 3

Which of the following would provide the MOST effective security outcome in an organization?

APerforming vendor security benchmark analyses at the request-for-proposal
(RFP) stage

BEnsuring security requirements are defined at the request-for-proposal (RFP)
stage

CExtending security assessment to cover asset disposal on contract termination

DExtending security assessment to include random penetration testing

Show Answer

Question: 4

Which of the following is the BEST way to ensure that responses to incidents in high-risk areas of the business are carried out in an organized manner?

AManagement approval of the incident response plan

BRole differentiation in the incident response plan

CAppropriate communication of the incident response plan

DPeriodic testing of the incident response plan

Show Answer

Question: 5

An organization has implemented a bring your own device (BYOD)} program. Which of the following is the GREATEST risk to the organization?

ALack of nonrepudiation

BDevice theft

CDevice incompatibility

DData leakage

Show Answer

Isaca CISM Quiz:321 Topic:3 Questions:1601-1605