Isaca CISM Quiz 233 Topic 6 Questions 1161-1165

Question: 1

When scoping a risk assessment, assets need lo be classified by

Aredundancy and recoverability

Bsensitivity and criticality.

Cthreats and opportunities

Dlikelihood and impact.

Show Answer

Question: 2

An organization is developing a disaster recovery plan (DRP) for a data center that hosts multiple applications The application recovery sequence would BEST be determined through an analysis of:

Akey performance indicators (KPls).

Brecovery time objectives (RTOs)

Cthe data classification scheme.

Drecovery point objectives (RPOs)

Show Answer

Question: 3

Which of the following is MOST important to consider when developing a business case to support the investment In an information security program?

ASenior management support

BResults of a cost-benefit analysis

CResults of a risk assessment

DImpact on the risk profile

Show Answer

Question: 4

An organization is considering a self-service solution for the deployment of virtualized development servers. Which of the following should be information security manager's PRIMARY concern?

AAbility to maintain server security baseline

BGeneration of excessive security event logs

CSegregation of servers from the production environment

DAbility to remain current with patches

Show Answer

Question: 5

Which of the following BEST supports the alignment of information security with business functions?

AA focus on technology security risk within business processes

BIT management support of security assessments

CBusiness management participation in security penetration tests

DCreation of a security steering committee

Show Answer

Isaca CISM Quiz:233 Topic:6 Questions:1161-1165