Isaca CISM Quiz 51 Topic 5 Questions 251-255

Question: 1

Human resources (HR) is evaluating potential Software as a Service (SaaS) cloud services. Which of the following should the information security manager do FIRST to support this effort?

AConduct a security audit on the cloud service providers.

BPerform a risk assessment of adopting cloud services.

CPerform a cost-benefit analysis of using cloud services.

DReview the cloud service providers' controls reports.

Show Answer

Question: 2

During a post-incident review, the sequence and correlation of actions must be analyzed PRIMARILY based on:

Ainterviews with personnel.

Blogs from systems involved.

Cdocuments created during the incident.

DA consolidated event timeline.

Show Answer

Question: 3

Which of the following is the MOST important reason to involve external forensics experts in evidence collection when responding to a major security breach?

ATo ensure evidence is handled by qualified resources

BTo prevent evidence from being disclosed to any internal staff members

CTo provide the response team with expert training on evidence handling

DTo validate the incident response process

Show Answer

Question: 4

Which of the following is the BEST method to protect consumer private information for an online public website?

AEncrypt consumer data in transit and at rest.

BUse secure encrypted transport layer.

CApply strong authentication to online accounts

DApply a masking policy to the consumer data.

Show Answer

Question: 5

Which of the following is MOST relevant for an information security manager to communicate to the board of directors?

AVulnerability assessments

BThe level of exposure

CThe level of inherent risk

DThreat assessments

Show Answer

Isaca CISM Quiz:51 Topic:5 Questions:251-255