Isaca CISM Quiz 238 Topic 4 Questions 1186-1190

Question: 1

When a security weakness is detected at facilities provided by an IT service provider, which of the following tasks must the information security manager perform FIRST?

AAdvise the service provider of countermeasures.

BAssess compliance with the service provider's security policy.

CReiterate the relevant security policy and standards

DConfirm the service providers contractual obligations.

Show Answer

Question: 2

Which of the following is the GREATEST security concern when an organization allows the use of social networks?

ANetwork performance degradation

BBrowser vulnerability exploitation

CDecreased user productivity

DInadvertent data disclosure

Show Answer

Question: 3

Which of the following should be an information security manager s MOST important consideration when conducting a physical security review of a potential outsourced data center?

AEnvironmental factors of the surrounding location

BAvailability of network circuit connections

CDistance of the data center from the corporate office

DProximity to law enforcement

Show Answer

Question: 4

An organization has decided to implement a security information and event management (SIEM) system. It is MOST important for the organization to consider:

Athreat assessments.

Bdata ownership.

Cindustry best practices.

Dlog sources.

Show Answer

Question: 5

What should be an information security manager's BEST course of action if funding for a security-related initiative is denied by a steering committee?

ADiscuss the initiative with senior management.

BLook for other ways to fund the initiative.

CProvide information from industry benchmarks

DDocument the accepted risk

Show Answer

Isaca CISM Quiz:238 Topic:4 Questions:1186-1190