Isaca CISM Quiz 68 Topic 4 Questions 336-340

Question: 1

When developing an incident escalation process, the BEST approach is to classify incidents based on:

Aestimated time to recover.

Binformation assets affected.

Ctheir root causes.

Drecovery point objectives (RPOs).

Show Answer

Question: 2

In addition to executive sponsorship and business alignment, which of the following is MOST critical for information security governance?

AAllocation of training resources

BCompliance with policies

CAuditability of systems

DOwnership of security

Show Answer

Question: 3

What is the PRIMARY objective of implementing standard security configurations?

AMaintain a flexible approach to mitigate potential risk to unsupported systems.

BCompare configurations between supported and unsupported systems.

CMinimize the operational burden of managing and monitoring unsupported systems.

DControl vulnerabilities and reduce threats from changed configurations.

Show Answer

Question: 4

Which of the following is the BEST strategy to implement an effective operational security posture?

AIncreased security awareness

BDefense in depth

CThreat management

DVulnerability management

Show Answer

Question: 5

An information security manager wants to improve the ability to identify changes in risk levels affecting the organization's systems. Which of the following is the BEST method to achieve this objective?

APerforming business impact analyses (BIA)

BUpdating the risk register

CMonitoring key risk indicators (KRIs)

DMonitoring key goal indicators (KGls)

Show Answer

Isaca CISM Quiz:68 Topic:4 Questions:336-340