Isaca CISM Quiz 203 Topic 5 Questions 1011-1015

Question: 1

Which of the following is MOST helpful for prioritizing the recovery of IT assets during a disaster?

AVulnerability assessment

BBusiness impact analysis (BIA)

CCost- benefit analysis

DRisk assessment

Show Answer

Question: 2

Which of the following would be the MOST effective incident response team structure for an organization with a large headquarters and worldwide branch offices?

ACoordinated

BDecentralized

COutsourced

DCentralized

Show Answer

Question: 3

When trying to integrate information security across an organization, the MOST important goal for a governing body should be to ensure:

Afunding is approved for requested information security projects.

Bthe resources used for information security projects are kept to a minimum.

Cperiodic information security audits are conducted.

Dinformation security is treated as a business critical issue.

Show Answer

Question: 4

Which of the following metrics would be considered an accurate measure of an information security program's performance?

AThe number of key risk indicators (KRIs) identified, monitored, and acted upon

BA collection of qualitative indicators that accurately measure security exceptions

CA combination of qualitative and quantitative trends that enable decision making

DA single numeric score derived from various measures assigned to the security program

Show Answer

Question: 5

An information security manager is preparing a presentation to obtain support for a security initative. Which of the following is the BEST way to obtain management's commitment for the initiative?

AProvide the estimated return on investment (ROI)

BProvide an analysis of current risk exposures.

CInclude historical data of reported incidents.

Dinclude industry benchmarking comparisons.

Show Answer

Isaca CISM Quiz:203 Topic:5 Questions:1011-1015