Isaca CISM Quiz 312 Topic 4 Questions 1556-1560

Question: 1

Which of the following BEST reflects the maturity of an information security program?

AThe number of security issues reported

BThe number of security incidents detected

CThe number of policies traceable to usable metrics

DThe number of findings corrected annually

Show Answer

Question: 2

For which of the following is it MOST important that system administrators be restricted to read-only access?

AUser access log files

BAdministrator user profiles

CSystem logging options

DAdministrator log files

Show Answer

Question: 3

Which of the following would BEST help an information security manager justify the implementation ofa security information and event

management (SIEM) system?

AResults of a risk assessment

BResults of a cost-benefit analysis

CSecurity benchmarks

DResults of a business impact analysis (BIA)

Show Answer

Question: 4

Which of the following would BEST help to ensure the alignment between information security and business functions?

AEstablishing a security awareness program

BEstablishing an information security governance committee

CProviding funding for information security efforts

DDeveloping information security policies

Show Answer

Question: 5

Which of the following is MOST important to have in place to help ensure an organization's cybersecurity program meets the needs of the business?

AInformation security governance

BRisk assessment program

CInformation security metrics

DInformation security awareness training

Show Answer

Isaca CISM Quiz:312 Topic:4 Questions:1556-1560