Isaca CISM Quiz 305 Topic 4 Questions 1521-1525

Question: 1

A CEO requires that information security risk management is practiced at the organizational level through a central risk register. Which of the following is the MOST important reason to report a summary of this risk register to the board?

ATo ensure alignment with industry standards and trends

BTo facilitate alignment between risk management and organizational objectives

CTo comply with the organization's regulatory and legal requirements

DTo ensure adequate funding is available for risk management and mitigation

Show Answer

Question: 2

An organization has decided to conduct a postmortem analysis after experiencing a loss from an information security attack. The PRIMARY purpose of this analysis should be to:

Aupdate information security policies.

Bevaluate the impact.

Cdocument lessons learned.

Dprepare for criminal prosecution.

Show Answer

Question: 3

In a call center, the BEST reason to conduct a social-engineering exercise is to:

Again funding for information security initiatives.

Bimprove password policy.

Cminimize the likelihood of successful attacks.

Didentify candidates for additional security training

Show Answer

Question: 4

Which of the following will BEST enhance the privacy of data in transit for an online transaction system?

AMasking sensitive data

BRequiring two-factor authentication

CUsing a secure communications protocol

DRequiring a digital signature

Show Answer

Question: 5

Which of the following is a PRIMARY function of an incident response team?

ATo provide a business impact analysis (BIA)

BTo provide a risk assessment for zero-day vulnerabilities

CTo provide effective incident mitigation

DTo provide a single point of contact for critical incidents

Show Answer

Isaca CISM Quiz:305 Topic:4 Questions:1521-1525