Isaca CISM Quiz 263 Topic 4 Questions 1311-1315

Question: 1

The GREATEST advantage of defining multiple types of system administrator accounts with different privileges is that it helps to ensure:

Acompliance with the acceptable use policy

Badequate control of system administration responsibilities

Cload balancing of system administration processing activities

Dincreased productivity of system administrators.

Show Answer

Question: 2

An organization plans to acquire and implement a new web-based solution to enhance service functionality. Which of the following is the BEST way to ensure that information handled by the solution is secure?

AIntegrate the organization's security requirements into the contract.

BAdopt secure coding practices during the solution's development.

CConduct a security audit before implementing the solution in production.

DEmbed security requirements throughout the life cycle of the solution.

Show Answer

Question: 3

Which of the following is the BEST source of information to help determine whether a third party's connections to the organization's internal network are aligned with internal control requirements?

ASecurity architectural diagrams

BService level agreements (SLAs)

CContractual requirements

DData classification standards

Show Answer

Question: 4

Which of the following is the MOST important reason to identify and classify the sensitivity of assets?

ATo determine the scope of the information security program

BTo allocate the information security program budget

CTo assign appropriate controls

DTo reduce the cost of protective controls

Show Answer

Question: 5

Which of the following is MOST important when allowing employees to work at home using personally owned devices?

AApproving personally owned devices

BEnforcing an end-point security policy

CAssessing vulnerabilities of home wireless connections

DReviewing OS on personal devices

Show Answer

Isaca CISM Quiz:263 Topic:4 Questions:1311-1315