Isaca CISM Quiz 202 Topic 4 Questions 1006-1010

Question: 1

Which of the following is the BEST type of access control for an organization with employees who move between departments?

AMandatory

BDiscretionary

CRole-based

DIdentity

Show Answer

Question: 2

Which of the following is the BEST way to ensure information security metrics are meaningful?

ARequiring information security metrics to be approved by senior management

BAligning information security metrics with business drivers

CCorrelating information security metrics to industry best practices

DUsing a dashboard to present the information security metrics

Show Answer

Question: 3

When responding to an incident, which of the following is required to ensure evidence remains legally admissible in court?

ACertified forensics examiners

BA documented incident response plan

CLaw enforcement oversight

DChain of custody

Show Answer

Question: 4

Which of the following defines the minimum security requirements that a specific system must meet?

ASecurity baseline

BSecurity procedure

CSecurity policy

DSecurity guideline

Show Answer

Question: 5

Which of the following metrics provides the BEST indication of the effectiveness of a security awareness campaign?

AUser approval rating of security awareness classes

BThe number of reported security events

CQuiz scores for users who took security awareness classes

DPercentage of users who have taken the courses

Show Answer

Isaca CISM Quiz:202 Topic:4 Questions:1006-1010