Isaca CISM Quiz 227 Topic 4 Questions 1131-1135

Question: 1

Which of the following is the PRIMARY objective of reporting security metrics to stakeholders?

ATo demonstrate alignment to the business strategy

BTo provide support for security audit activities

CTo identify key controls within the organization

DTo communicate the effectiveness of the security program

Show Answer

Question: 2

To minimize security exposure introduced by changes to the IT environment, which of the following is MOST important to implement as part of change management?

APerforming post-change reviews before closing change tickets

BRequiring approval by senior management

CPerforming a business impact analysis (B1A) prior to implementation

DConducting a security risk assessment prior to go-live

Show Answer

Question: 3

When granting a vendor remote access to a system, which of the following is the MOST important consideration?

APassword hashing

BSession monitoring

CMulti- factor authentication

DHard drive encryption

Show Answer

Question: 4

Which of the following is the MOST important criterion for complete closure of a security incident?

ADocumenting and reporting to senior management

BLevel of potential impact

CRoot cause analysis and lessons learned

DIdentification of affected resources

Show Answer

Question: 5

Which of the following would be MOST effective in preventing malware from being launched through an email attachment?

AUp-to-date security policies

BSecurity awareness training

CA network intrusion detection system (NlDS)

DPlacing the e-mail server on a screened subnet

Show Answer

Isaca CISM Quiz:227 Topic:4 Questions:1131-1135