Isaca CISM Quiz 243 Topic 5 Questions 1211-1215

Question: 1

Which of the following should be of MOST influence to an information security manager when developing IT security policies?

APut and current threats

BCompliance with regulations

CIT security framework

DBusiness strategy

Show Answer

Question: 2

During a review to approve a penetration test plan, which of the following should be an information security

manager's PRIMARY concern?

APenetration test team's deviation from scope

BUnauthorized access to administrative utilities

CFalse positive alarms to operations staff

DImpact on production systems

Show Answer

Question: 3

The MAIN reason for an information security manager to monitor industry level changes in the business and IT is to:

Aevaluate the effect of the changes on the levels of residual risk.

Bidentify changes in the risk environment

Cupdate information security policies in accordance with the changes

Dchange business objectives based on potential impact

Show Answer

Question: 4

Segregation of duties is a security control PRIMARILY used to:

Alimit malicious behavior.

Bdecentralize operations.

Cestablish dual check.

Destablish hierarchy.

Show Answer

Question: 5

From an Information security perspective, legal issues associated with a transborder flow of technology-related items are MOST often related to

Awebsite transactions and taxation.

Black of competition and free trade

Csoftware patches and corporate data

Dencryption tools and personal data

Show Answer

Isaca CISM Quiz:243 Topic:5 Questions:1211-1215