Isaca CISM Quiz 99 Topic 5 Questions 491-495

Question: 1

Which of the following would contribute MOST to employees' understanding of data handling responsibilities?

ADemonstrating support by senior management of the security program

BImplementing a tailored security awareness training program

CRequiring staff acknowledgement of security policies

DLabeling documents according to appropriate security classification

Show Answer

Question: 2

Which of the following is the MOST effective approach for integrating security into application development?

AIncluding security in user acceptance testing sign-off

BPerforming vulnerability scans

CDefining security requirements

DDeveloping security models in parallel

Show Answer

Question: 3

Which of the following is MOST important to the successful development of an information security strategy?

AAn implemented development life cycle process

BA well-implemented governance framework

CCurrent state and desired objectives

DApproved policies and standards

Show Answer

Question: 4

Which of the following would present the GREATEST need to revise information security poll'

AImplementation of a new firewall

BAn increase in reported incidents

CA merger with a competing company

DChanges in standards and procedures

Show Answer

Question: 5

Which of the following control type is the FIRST consideration for aligning employee behavior with an organization's information security objectives?

APhysical security control

BDirective security

CTechnical security controls

DLogical access control

Show Answer

Isaca CISM Quiz:99 Topic:5 Questions:491-495