Isaca CISM Quiz 183 Topic 5 Questions 911-915

Question: 1

In an organization implementing a data classification program, ultimate responsibility for the data on the database server lies with the:

Adatabase administrator

Binformation technology manager.

Cbusiness unit manager

Dinformation security manager.

Show Answer

Question: 2

Application data integrity risk would be MOST directly addressed by a design that includes:

Areconciliation routines such as checksums, hash totals, and record counts

Bstrict application of an authorized data dictionary.

Caccess control technologies such as role-based entitlements.

Dapplication log requirements such as field-level audit trails and user activity logs.

Show Answer

Question: 3

What should be an information security manager's PRIMARY objective in the event of a security incident?

AIdentify the source of the breach and how it was perpetrated.

BIdentify lapses in operational control effectiveness.

CContain the threat and restore operations in a timely manner.

DEnsure that normal operations are not disrupted.

Show Answer

Question: 4

Which of the following is the BEST advantage of a centralized information security organizational structure?

AIt is easier to manage and control business unit security teams.

BIt provides a faster turnaround for security waiver requests.

CIt is more responsive to business unit needs.

DIt allows for a common level of assurance across The enterprise.

Show Answer

Question: 5

Which of the following would be MOST helpful in gaining support for a business case for an information security initiative?

APresenting a solution comparison matrix

BEmphasizing threats to the organization

CDemonstrating organizational alignment

DReferencing control deficiencies

Show Answer

Isaca CISM Quiz:183 Topic:5 Questions:911-915