Isaca CISM Quiz 173 Topic 4 Questions 861-865

Question: 1

Of the following, who should have PRIMARY responsibility for assessing the security risk associated with an outsourced cloud provider contract?

ACompliance manager

BService delivery manager

CInformation security manager

DChief information officer

Show Answer

Question: 2

The PRIMARY purpose of aligning information security with corporate governance objectives is to:

Aidentity an organization s tolerance for risk

Bre-align roles and responsibilities.

Cbuild capabilities to improve security processes

Dconsistently manage significant areas of risk.

Show Answer

Question: 3

The frequency of conducting business impact analysis (BIA) should PRIMARILY be based on:

Achanges in regulatory requirements.

Bthe number of security incidents.

Cbusiness continuity plan (BCP) testing.

Dchanges in business processes.

Show Answer

Question: 4

During the restoration of several servers, a critical process that services external customers was restored late due to a failure, resulting in lost revenue. Which of the following would have BEST helped to prevent this occurrence?

AImprovements to incident identification methods

BUpdates to the business impact analysis (BIA)

CMore effective disaster recovery plan (DRP) testing

DValidation of senior management's risk tolerance

Show Answer

Question: 5

Which of the following approaches is BEST for selecting controls to minimize information security risks?

AControl-effectiveness evaluation

BRisk assessment

CCost-benefit analysis

DIndustry best practices

Show Answer

Isaca CISM Quiz:173 Topic:4 Questions:861-865