Isaca CISM Quiz 191 Topic 4 Questions 951-955

Question: 1

Which of the following is MOST critical for responding effectively to security breaches?

ACounterattack techniques

BRoot cause analysis

CManagement communication

DEvidence gathering

Show Answer

Question: 2

An organization has implemented a new customer relationship management (CRM) system. Who should be responsible for enforcing authorized and controlled access to the CRM data?

AInternal II audit

BThe data custodian

CThe data owner

DThe information security manager

Show Answer

Question: 3

Which of the following should be the PRIMARY consideration when developing a security governance framework for an enterprise?

ABenchmarking against industry best practice

BAssessment of the current security architecture

CResults of a business impact analysis (BIA)

DUnderstanding of the current business strategy

Show Answer

Question: 4

What is the PRIMARY role of the information security program?

ATo develop and enforce a set of security policies aligned with the business

BTo provide guidance in managing organizational security risk

CTo perform periodic risk assessments and business impact analyses (BIAs)

DTo educate stakeholders regarding information security requirements

Show Answer

Question: 5

Which of the following is the MOST important factor to consider when establishing a severity hierarchy for information security incidents?

ARegulatory compliance

BManagement support

CBusiness impact

DResidual risk

Show Answer

Isaca CISM Quiz:191 Topic:4 Questions:951-955