Isaca CISM Quiz 217 Topic 5 Questions 1081-1085

Question: 1

An information security manager learns that a departmental system is out of compliance with the information security policy's authentication requirements. Which of the following should be the information security manager's FIRST course of action?

AIsolate the noncompliant system from the rest of the network.

BConduct an impact analysis to quantify the associated risk

CRequest risk acceptance from senior management.

DSubmit the issue to the steering committee for escalation.

Show Answer

Question: 2

Which of the following should be communicated FIRST to senior management once an information security incident has been contained?

AWhether the recovery time objective was met

BThe initial business impact of the incident

CDetails on containment activities

DA summary of key lessons learned from the incident

Show Answer

Question: 3

Which of the following is MOST important when prioritizing an information security incident?

AOrganizational risk tolerance

BCost to contain and remediate the incident

CCriticality of affected resources

DShort-term impact to shareholder value

Show Answer

Question: 4

In a resource-restricted security program, which of the following approaches will provide the BEST use of the limited resources?

ACross-training

BRisk avoidance

CRisk prioritization

DThreat management

Show Answer

Question: 5

What is the PRIMARY purpose of communicating business impact to an incident response team?

ATo facilitate resource allocation tor preventive measures

BTo enable effective prioritization of incidents

CTo provide information for communication of incidents

DTo provide monetary values for post-incident review

Show Answer

Isaca CISM Quiz:217 Topic:5 Questions:1081-1085