Isaca CISM Quiz 289 Topic 4 Questions 1441-1445

Question: 1

An organization wants to implement an emerging technology to support operations. What should the information security manager do FIRST when .............. recommendation?

AReview key risk indicators (KRIs).

BReview existing security policies.

CDevelop a business case.

DAssess the potential security impact.

Show Answer

Question: 2

Which of the following will BEST enable the identification of appropriate controls to prevent repeated occurrences of similar types of information...........

AReview existing preventive controls for security weaknesses.

BPerform a root cause analysis of the security incidents.

CReview lessons learned with key stakeholders.

DPerform a business impact analysis (BIA) of the security incidents.

Show Answer

Question: 3

Which of the following is the BEST indicator to demonstrate whether information security investments are optimally supporting organizational objecti.....

APercentage of security-related initiatives completed within budget

BPercentage of current security resource utilization

CRatio of security costs to the value of assets

DRatio of security incidents from known risk versus unidentified risk

Show Answer

Question: 4

Which of the following would be the GREATEST threat posed by a distributed denial of service (DDoS) attack on a publicly facing .....

APrevention of authorized access

BExecution of unauthorized commands

CDefacement of website content

DUnauthorized access to resources

Show Answer

Question: 5

Which of the following is MOST important to present to stakeholders to help obtain support for implementing a new information

AA statement of generally accepted good practices

BAn overview of competitors' information security strategies

CThe potential impact of current threats

DAn assessment of current technological exposures

Show Answer

Isaca CISM Quiz:289 Topic:4 Questions:1441-1445