Isaca CISM Quiz 134 Topic 4 Questions 666-670

Question: 1

Which of the following should be used to attain sustainable and continuous information security process improvement?

AAnnual audit

BPlan, Do. Check. Act Process Model

CBalanced scorecard

DSystem development life cycle (SDLC) process

Show Answer

Question: 2

Which of the following is MOST helpful in integrating information security governance with corporate governance?

AIncluding information security processes within operational and management processes

BAligning the information security governance to a globally accepted framework

CProviding independent reports of information security efficiency and effectiveness to the board

DAssigning the implementation of information security governance to the steering committee

Show Answer

Question: 3

Which of the following is the GREATEST benefit of information asset classification to an organization?

AIt demonstrates the value of information assets for financial reporting.

BIt helps to optimize the investment in protecting information assets.

CIt helps to minimize the cost of regulatory compliance efforts

DIt measures qualitative value of the information.

Show Answer

Question: 4

A business unit has requested IT to implement simple authentication using IDs and passwords. The information security policy requires using multi-factor authentication. The information security manager should FIRST:

Aimplement two-factor authentication.

Bescalate the request to senior management

Cperform a risk assessment

Dassess alignment with business objectives.

Show Answer

Question: 5

Which of the following is MOST helpful to review to gain an understanding of the effectiveness of an organization s information security program?

AExternal Audit results

BCost-benefit analysis

CKey risk indicators (KRls)

DBalanced scorecard

Show Answer

Isaca CISM Quiz:134 Topic:4 Questions:666-670