Isaca CISM Quiz 163 Topic 5 Questions 811-815

Question: 1

In a risk assessment after the identification of threats to organizational assets, the information security manager would:

Adetermine threats to be reported to upper management.

Bimplement controls to achieve target risk levels.

Crequest funding for the security program.

Devaluate the controls currently in place.

Show Answer

Question: 2

Which of the following is the KST way to align security and business strategies?

AInclude security risk as part of corporate risk management,

BIntegrate information security governance into corporate governance

CEstablish key performance indicators (KPls) for business through security processes.

DDevelop a balanced scorecard for security

Show Answer

Question: 3

The MOST important outcome of information security governance is:

Abusiness risk avoidance

Binformed decision making.

Calignment with business goals.

Dalignment with compliance requirements.

Show Answer

Question: 4

Which of the following is the BEST way to demonstrate to senior management that organizational security practices comply with industry standards?

AExistence of an industry-accepted framework

BUp-to-date policy and procedures documentation

CA report on the maturity of controls

DResults of an independent assessment

Show Answer

Question: 5

Which of the following is the PRIMARY purpose for establishing a bring your own device (BYOD) policy that only permits application downloads from designated online markets.

AEnhance IT application support for users.

BProtect against malware-based attacks.

CConserve storage for approved applications.

DAllow IT to monitor application usage.

Show Answer

Isaca CISM Quiz:163 Topic:5 Questions:811-815