Isaca CISM Quiz 205 Topic 4 Questions 1021-1025

Question: 1

Which of the following is the MOST important influence to the continued success of an organization's information security strategy?

AInformation systems

BSecurity processes

COrganizational culture

DPolicy development

Show Answer

Question: 2

Which of the following is MOST likely to increase end user security awareness in an organization?

AA dedicated channel for reporting suspicious emails

BSecurity objectives included in job descriptions

CSimulated phishing attacks

DRed team penetration testing

Show Answer

Question: 3

Which of the following is the PRIMARY goal of a risk management program?

AManage compliance with organizational polices.

BImplement preventive controls against threats

CReduce the organization s risk appetite

DManage the business impact of inherent risks.

Show Answer

Question: 4

Reviewing which of the following would provide the GREATEST Input to the asset classification process?

ASensitivity of the data

BCompliance requirements

CReplacement cost of the asset

DRisk assessment

Show Answer

Question: 5

An information security manager is evaluating the key risk indicators (KRls) for an organization s information security program. Which of the following would be the information security manager s GREATEST concern?

AUse of qualitative measures

BMultiple KRls for a single control process

CUndefined thresholds to trigger alerts

DLack of formal KRI approval from IT management

Show Answer

Isaca CISM Quiz:205 Topic:4 Questions:1021-1025