Isaca CISM Quiz 210 Topic 4 Questions 1046-1050

Question: 1

The BEST way to encourage good security practices is to:

Arecognize appropriate security behavior by individuals

Bpublish the information security policy.

Cschedule periodic compliance audits.

Ddiscipline those who fail to comply with the security policy.

Show Answer

Question: 2

Which of the following is a PRIMARY responsibility of an information security steering committee?

ADeveloping an Information security architecture

BUpdating the information security threat profile

CApproving business cases for information security initiatives

DDrafting information security policies in line with business objectives

Show Answer

Question: 3

Which of the following is MOST helpful when justifying the funding required for a compensating control?

ABusiness impact analysis (B1A)

BRisk analysis

CBusiness case

DThreat assessment

Show Answer

Question: 4

Which of the following is the BIST course of action for the information security manager when residual risk is above the acceptable level of risk?

ADefer to business management.

BCarry out a risk assessment

CPerform a cost-benefit analysis.

DRecommend additional controls.

Show Answer

Question: 5

The PRIMARY goal of a post-incident review should be to

Adetermine why the incident occurred

Bdetermine how to improve the incident handling process

Cestablish the cost of the incident to the business.

Didentify policy changes to prevent a recurrence

Show Answer

Isaca CISM Quiz:210 Topic:4 Questions:1046-1050