Isaca CISM Quiz 100 Topic 5 Questions 496-500

Question: 1

Which of the following processes is the FIRST step in establishing an information security policy?

AReview of current global standards

BBusiness risk assessment

CSecurity controls evaluation

DInformation security audit

Show Answer

Question: 2

Which of the following is the BEST resource for evaluating the strengths and weaknesses of an incident response plan?

ARecovery time objectives (RTOs)

BMission, goals and objectives

CIncident response maturity assessment

DDocumentation from preparedness tests

Show Answer

Question: 3

Which of the following is the MOST useful metric for determining how well firewall logs are being monitored?

AThe number of port scanning attempts

BThe number of log entries reviewed

CThe number of investigated alerts

DThe number of dropped malformed packets

Show Answer

Question: 4

Which of the following is a PRIMARY security responsibility of an information owner?

ATesting information classification controls

BDetermining the controls associated with information classification

CMaintaining the integrity of data in the information system

DDeciding what level of classification the information requires

Show Answer

Question: 5

Which of the following is an information security manager's BEST course of action to address a significant materialized risk that was not prevented by organizational controls?

AUpdate the business impact analysis (BIA)

BUpdate the risk register.

CPerform root cause analysis.

DInvoke the incident response plan.

Show Answer

Isaca CISM Quiz:100 Topic:5 Questions:496-500