Isaca CISM Quiz 242 Topic 4 Questions 1206-1210

Question: 1

To integrate security into system development fie cycle (SDLC) processes, an organization MUST ensure that security.

ARoles and responsibly have been defined

BIs a prerequisite for complete of major phases

CIs a represented on the configuration control board.

DPerformance metrics have been met.

Show Answer

Question: 2

Which of the following is the BEST way for an information security manager to justify ongoing annual maintenance fees associated with an intrusion prevention system (IPS)*?

AProvide yearly competitive pricing to illustrate the value of the IPS.

BEstablish and present appropriate metrics that track performance

CPerform industry research annually and document the overall ranking of the IPS

DPerform a penetration test to demonstrate the ability to protect

Show Answer

Question: 3

Risk identification, analysis, and mitigation activities can BCST be integrated into business life cycle processes by linking them to:

Acontinuity planning

Bcompliance testing

Cconfiguration management.

Dchange management

Show Answer

Question: 4

Which of the following is the MOST significant security risk in IT asset management?

AUnregistered IT assets may riot be included in security documentation.

BUnregistered IT assets may not be configured properly.

CIT assets may be used by staff for private purposes.

DUnregistered IT assets may not be supported.

Show Answer

Question: 5

Which of the following is the GREATEST benefit of a centralized approach to coordinating information security?

ABusiness user buy-in

BOptimal use of security resources

CReduction in the number of policies

DIntegration with business functions

Show Answer

Isaca CISM Quiz:242 Topic:4 Questions:1206-1210