Isaca CISM Quiz 225 Topic 6 Questions 1121-1125

Question: 1

Which of the following is the BEST indication that an information security control is no longer relevant?

AUsers regularly bypass or ignore the control

BThe control does not support a specific business function.

CIT management does not support the control.

DFollowing the control costs the business more than not following it.

Show Answer

Question: 2

Which of the following would BEST demonstrate the maturity level of an organization's security incident response program?

AAn increase in the number of reported incidents

BOngoing review and evaluation of the incident response team

CA decrease in the number of reported incidents

DA documented and live-tested incident response process

Show Answer

Question: 3

An organization has established information security policies, but the information security the MOST likely reason for this situation?

AThe information security policies are not communicated across the organization.

BThe information security policies lack alignment with corporate goals.

CThe information security program is not adequately funded.

DThe organization is operating in a highly regulated industry.

Show Answer

Question: 4

The PRIMARY focus of a training curriculum for members of an incident response team should be:

Atechnology training.

Bexternal corporate communication

Csecurity awareness

Dspecific role training,

Show Answer

Question: 5

Which of the following BEST determines an information asset's classification?

ADirectives from the data owner

BValue of the information asset to competitors

CCost of producing the information asset

DCriticality to a business process

Show Answer

Isaca CISM Quiz:225 Topic:6 Questions:1121-1125