Isaca CISM Quiz 186 Topic 3 Questions 926-930

Question: 1

Which of the following is the MOST important prerequisite to performing an information security risk assessment?

AClassifying assets

BReviewing the business impact analysis (BIA)

CAssessing threats and vulnerabilities

DDetermining risk tolerance

Show Answer

Question: 2

A CEO requests access to corporate documents from a mobile device that does not comply with organizational policy. The information security manager should FIRST:

Aevaluate the business risk.

Bdeploy additional security controls.

Cevaluate a third-party solution.

Dinitiate an exception approval process.

Show Answer

Question: 3

In addition to business alignment and security ownership, which of the following is MOST critical for information security governance?

AAuditability of systems

BCompliance with policies

CReporting of security metrics

DExecutive sponsorship

Show Answer

Question: 4

To ensure adequate disaster-preparedness among IT infrastructure personnel, it is MOST important to:

Ahave the most experienced personnel participate in recovery tests.

Bperiodically rotate recovery-test participants.

Cinclude end-user personnel in each recovery test.

Dassign personnel-specific duties in the recovery plan.

Show Answer

Question: 5

Which of the following would BEST enhance firewall security?

APlacing the firewall on a screened subnet

BLogging of security events

CImplementing change-control practices

DProviding dynamic address assignment

Show Answer

Isaca CISM Quiz:186 Topic:3 Questions:926-930