Isaca CISM Quiz 122 Topic 4 Questions 606-610

Question: 1

It is suspected that key emails have been viewed by unauthorized parties. The email administrator conducted an investigation but it has not returned any information relating to the incident, and leaks are continuing. Which of the following is the BEST recommended course of action to senior management?

ACommence security training for staff at the organization.

BRebuild the email application

CArrange for an independent review.

DRestrict the distribution of confidential emails.

Show Answer

Question: 2

Which of the following is the- PRIMARY objective of an incident communication plan?

ATo convey information about the incident to those affected by it

BTo prevent reputation damage to the organization

CTo prevent unannounced visits from the media during crisis

DTo fulfill regulatory requirements for incident response

Show Answer

Question: 3

When developing a classification method for incidents, the categories MUST be:

Aquantitatively defined.

Bregularly reviewed.

Cspecific to situations.

Dassigned to incident handlers.

Show Answer

Question: 4

Relying on which of the following methods when detecting new threats using IDS should be of MOST concern?

AStatistical pattern recognition

BAttack signatures

CHeuristic analysis

DTraffic analysis

Show Answer

Question: 5

What is the MOST important factor for determining prioritization of incident response?

AService level agreements (SLAs) pertaining to the impacted systems

BThe potential impact to the business

CThe time to restore the impacted systems

DThe availability of specialized technical staff

Show Answer

Isaca CISM Quiz:122 Topic:4 Questions:606-610