Isaca CISM Quiz 261 Topic 4 Questions 1301-1305

Question: 1

The criticality of an information asset is derived from its:

Areplacement cost

Bthreat level

Cbusiness value

Dfrequency of use.

Show Answer

Question: 2

Which of the following approaches would MOST likely ensure that risk management is integrated into the business life cycle processes?

AUnderstanding the risk tolerance of corporate management

BIntegrating security risk into corporate risk management

CConducting periodic risk assessments

DIntegrating risk management into the software development life cycle

Show Answer

Question: 3

Which of the following is the BEST way for an information security manager to protect against a zero-day attack?

AConfigure daily runs of the virus protection software.

BConduct vulnerability scans on a daily basis.

CPerform a business impact analysis (BIA).

DImplement heuristic-based monitoring tools

Show Answer

Question: 4

When creating security baselines, it is MOST important to:

Ademonstrate adherence to compliance criteria

Bestablish consistent enterprise-wide controls

Cidentify critical systems storing sensitive data

Destablish maximum security requirements.

Show Answer

Question: 5

What is the BEST way for a customer to authenticate an e-commerce vendor?

AUse a secure communications protocol for the connection.

BVerify the vendor's certificate with a certificate authority.

CRequest email verification of the order

DEncrypt the order using the vendor s private key

Show Answer

Isaca CISM Quiz:261 Topic:4 Questions:1301-1305