Isaca CISM Quiz 131 Topic 4 Questions 651-655

Question: 1

Which of the following is the MOST important element of a response plan for IT security incidents?

ARequirements for investigative evidence

BAppropriate team members

CTest plans for containment and recovery procedures

DGuidelines for preserving digital evidence

Show Answer

Question: 2

When an organization and its IT-hosting service provider are establishing a contract with each other, it is MOST important that the

contract includes:

Arecovery time objectives (RTOs).

Bdetails of expected security metrics

Cpenalties for noncompliance with security policy

Deach party s security responsibilities.

Show Answer

Question: 3

Authorization can BEST be accomplished by establishing:

Awhether users are who they say they are

Bwho users can do when they are granted system access.

Chow users identify themselves to information systems.

Dthe ownership of the data

Show Answer

Question: 4

Which of the following is the MOST important reason for performing a risk analysis?

AAssigning the appropriate level of protection

BPromoting increased security awareness in the organization

CIdentifying critical information assets

DIdentifying and eliminating threats

Show Answer

Question: 5

Which of the following is the MOST important consideration of the information security manager to ensure effective security monitoring of outsourced operations?

APerforming security audits on the outsourcing vendor s IT environment

BReflecting monitoring requirements m the contractual indemnity agreement

Cincluding security requirements and right to audit within the contract

DMonitoring security incidents and periodic security reports from the outsourcing vendor

Show Answer

Isaca CISM Quiz:131 Topic:4 Questions:651-655