Isaca CISM Quiz 130 Topic 4 Questions 646-650

Question: 1

Which of the following would BEST mitigate identified vulnerabilities in a timely manner?

AMonitoring of key risk indicators (KRls)

BCategorization of the vulnerabilities based on system's criticality

CContinuous vulnerability monitoring tool

DAction plan with responsibilities and deadlines

Show Answer

Question: 2

During the due diligence phase of an acquisition, the MOST important course of action for an information security manager is to:

Aperform a gap analysis.

Breview the state of security awareness.

Cperform a risk assessment

Dreview information security policies

Show Answer

Question: 3

Which of the following is the BEST way to facilitate the alignment between an organization's information security program and business objectives?

AThe information security program is audited by the internal audit department

BThe chief executive officer reviews and approves the information security program.

CThe information security governance committee includes representation from key business areas.

DInformation security is considered at the feasibility stage of all I Perform a business impact analysisT projects

Show Answer

Question: 4

Which of the following would BEST ensure that application security standards are in place?

APenetration testing

BPerforming a code review

CFunctional testing

DPublishing software coding standards

Show Answer

Question: 5

The PRIMARY disadvantage of using a cold-site recovery facility is that it is:

Anot cost-effective for testing critical applications at the site

Bnot possible to reserve test dates m advance

Conly available if not being used by the primary tenant,

Dunavailable for testing during normal business hours.

Show Answer

Isaca CISM Quiz:130 Topic:4 Questions:646-650