Isaca CISM Quiz 222 Topic 4 Questions 1106-1110

Question: 1

An information security manager has been made aware that some employees are discussing confidential corporate business on social media sites. Which of the following is the BEST response to this situation?

ABlock workplace access to social media sites and monitor employee usage.

BScan social media sites for company-related information.

CTrain employees how to set up privacy rules on social media sites.

DCommunicate social media usage requirements and monitor compliance.

Show Answer

Question: 2

Which of the following is MOST important to consider when prioritizing threats during the risk assessment process?

AThe potential impact on operations

BThe criticality of threatened systems

CThe capability of threat actors

DThe severity of exploited vulnerabilities

Show Answer

Question: 3

Which of the following is the MOST important outcome of testing incident response plans?

AAreas requiring investment are identified.

BStaff is educated about current threats.

CAn action plan is available for senior management.

DInternal procedures are improved.

Show Answer

Question: 4

Which of the following is an indicator of improvement in the ability to identify security risks?

AIncreased number of reported security incidents

BDecreased number of staff requiring information security training

CIncreased number of security audit issues resolved

DDecreased number of information security risk assessments

Show Answer

Question: 5

When selecting risk response options to manage risk, an information security manager's MAIN focus should be on reducing:

Aexposure to meet risk tolerance levels.

Bthe number of security vulnerabilities.

Cthe likelihood of threat.

Dfinancial loss by transferring risk.

Show Answer

Isaca CISM Quiz:222 Topic:4 Questions:1106-1110