Isaca CISM Quiz 101 Topic 5 Questions 501-505

Question: 1

Which of the following would be MOST effective when justifying the cost of adding security controls to an existing web application?

AVulnerability assessment results

BApplication security policy

CA business case

DInternal audit reports

Show Answer

Question: 2

When the inherent risk of a business activity is lower than the acceptable risk level, the BEST course of action would be to:

Aimplement controls to mitigate the risk.

Bmonitor for business changes.

Creview the residual risk level

Dreport compliance to management

Show Answer

Question: 3

Which of the following would provide the MOST useful input when creating an information security program?

ABusiness case

BInformation security budget

CKey risk indicators (KRls)

DInformation security strategy

Show Answer

Question: 4

Which of the following is the PRIMARY reason to invoke continuity and recovery plans?

ATo achieve service delivery objectives

BTo coordinate with senior management

CTo enforce service level agreements (SLAs)

DTo protect corporate networks

Show Answer

Question: 5

Which of the following is the MOST effective data loss control when connecting a personally owned mobile device to the corporate email system?

AUsers must agree to allow the mobile device to be wiped if it is lost

BEmail must be stored in an encrypted format on the mobile device

CA senior manager must approve each new connection

DEmail synchronization must be prevented when connected to a public Wi-Fi hotspot.

Show Answer

Isaca CISM Quiz:101 Topic:5 Questions:501-505