Isaca CISM Quiz 303 Topic 5 Questions 1511-1515

Question: 1

Which of the following is the PRIMARY role of the information security manager in application development?

To ensure:

Aenterprise security controls are implemented.

Bcompliance with industry best practice.

Csecurity is integrated into the system development life cycle (SDLC).

Dcontrol procedures address business risk.

Show Answer

Question: 2

After isolating a system compromised in a security incident, which of the following should be the PRIMARY objective of the information security team?

APreserving the integrity of incident-related data

BIdentifying the type of threat that compromised the system

CImplementing improvements to prevent recurrence of the incident

DProviding response actions to restore the compromised system

Show Answer

Question: 3

The fundamental purpose of establishing security metrics is to:

Aincrease return on investment (ROI).

Badopt security best practices.

Cprovide feedback on control effectiveness,

Destablish security benchmarks

Show Answer

Question: 4

Which of the following BEST facilitates the monitoring of risk across an organization?

ARisk appetite trends

BPenetration testing

CKey risk indicators (KRls)

DThreat assessments

Show Answer

Question: 5

What is the PRIMARY objective of assigning classifications to information assets?

AMaintain an accurate IT asset inventory.

BIdentify business owners and information custodians.

CIdentify appropriate levels of protection.

DDemonstrate compliance with regulatory requirements

Show Answer

Isaca CISM Quiz:303 Topic:5 Questions:1511-1515