Isaca CISM Quiz 199 Topic 5 Questions 991-995

Question: 1

Which of the following is the BEST reason to initiate a reassessment of current risk?

ACertification requirements

BFollow-jp to an audit report

CA recent security incident

DChanges to security personnel

Show Answer

Question: 2

Failure to include information security requirements within the build/buy decision would MOST likely result in the need for:

Acommercial product compliance with corporate standards.

Bmore stringent source programming standards.

Ccompensating controls in the operational environment.

Dsecurity scanning of operational platforms

Show Answer

Question: 3

Which of the following will BEST provide an organization with ongoing assurance of the information security services provided by a cloud provider?

AEvaluating the provider s security incident response plan

BEnsuring the provider's roles and responsibilities are established

CRequiring periodic self-assessments by the provider

DContinuous monitoring of An information security risk profile

Show Answer

Question: 4

Which of the following is the BEST way to sustain employee interest in information security awareness in an organization?

AEnsuring a common security awareness program for all staff

BRelating security awareness programs to security policies

CEnsuring all staff are involved

DUsing a variety of delivery methods

Show Answer

Question: 5

When supporting an organization's privacy officer, which of the following is the information security managers PRIMARY role regarding privacy requirements?

AConducting privacy awareness programs

BEnsuring appropriate controls are in place

CMonitoring the transfer of private data

DDetermining data classification

Show Answer

Isaca CISM Quiz:199 Topic:5 Questions:991-995