Isaca CISM Quiz 133 Topic 3 Questions 661-665

Question: 1

Which of the following is the MOST effective way for senior management to support the integration of information security governance into corporate governance?

AEstablish a storing committee with representation from across the organization.

BAppoint a business manager as head of information security

CPromote organization-wide information security awareness campaigns.

DDevelop the information security strategy based on the enterprise strategy

Show Answer

Question: 2

Which of the following would BEST enable management to be aware of an electronic breach to an externally hosted database?

AImplement a dedicated firewall configured to block suspicious activity.

BObligate the vendor to report suspicious activity and database breaches.

CImplement tog monitoring of the database environment for suspicious activity.

DReview independent audit reports of the vendors data center environment.

Show Answer

Question: 3

The MOST effective control to detect fraud inside an organization's network is to:

Asegregate duties

Bapply two-factor authentication

Creview access logs.

Dimplement C (IDS).

Show Answer

Question: 4

The PRIMARY goal of a security infrastructure design is the:

Aelimination of risk exposures.

Bprotection of corporate assets

Creduction of security incidents.

Doptimization of IT resources

Show Answer

Question: 5

What is a potential issue when emails are encrypted and digitally signed?

AThe receiver can repudiate the receipt of the emails.

BHackers can eavesdrop on emails.

CHackers can introduce forged messaging within emails.

DThe sender can repudiate the contents of the emails.

Show Answer

Isaca CISM Quiz:133 Topic:3 Questions:661-665