Isaca CISM Quiz 254 Topic 6 Questions 1266-1270

Question: 1

Which of the following is the MOST effective approach of delivering security incident response training?

AProvide on-the-job training and mentoring for the incident response team.

BEngage external consultants to present real-world examples within the industry.

CInclude incident response training within new staff orientation.

DPerform role-playing exercises to simulate real-world incident response scenarios.

Show Answer

Question: 2

Which of the following is the BEST indicator that an organization is appropriately managing risk?

AThe number of events reported from the intrusion detection system (IDS) has declined.

BRisk assessment results are within tolerance

CA penetration test does not identify any high-risk system vulnerabilities

DThe number of security incident events reported by staff has increased

Show Answer

Question: 3

Which of the following would be MOST useful in a report to senior management for evaluating changes in the organization's information security risk position?

ATrend analysis

BIndustry benchmarks

CManagement action plan

DRisk register

Show Answer

Question: 4

A validated patch to address a new vulnerability that may affect a mission-critical server has been released. What should be done immediately?

AConduct an impact analysis.

BCheck the server s security and install the patch.

CAdd mitigating controls.

DTake the server off-line and install the patch.

Show Answer

Question: 5

An information security manager has been tasked with implementing a security awareness training program Which of this ..... have the MOST influence on the effectiveness of this program?

ABasing the training program on industry best practices

BObtaining buy-in from end users

CTailoring the training to the organization's environment

DObtaining buy-in from senior management

Show Answer

Isaca CISM Quiz:254 Topic:6 Questions:1266-1270