Isaca CISM Quiz 262 Topic 6 Questions 1306-1310

Question: 1

What is the MOST effective way to ensure information security incidents will be managed effectively and in a timely manner?

AEstablish and measure key performance indicators (KPIs)

BTest incident response procedures regularly.

CCommunicate incident response procedures to staff.

DObtain senior management commitment

Show Answer

Question: 2

Which of the following is the MOST important consideration when deciding whether to continue outsourcing to a managed security service provider?

AThe business need for the function

BThe ability to meet deliverables

CThe vendor's reputation m the industry

DThe cost of the services

Show Answer

Question: 3

The FIRST step in a risk assessment for a business application is to:

Aidentify the threats to the application

Bidentify the vulnerabilities of the application

Crank the threats to the application

Didentify the assets used by the application.

Show Answer

Question: 4

An outsourced vendor handles an organization's business-critical dat

a. Which of the following is the MOST effective way for the client organization to obtain assurance of the vendor's security practices?

AVerifying security certifications held by the vendor

BReviewing the vendor's security audit reports

CRequiring business continuity plans (BCPs) from the vendor

DRequiring periodic independent third-party reviews

Show Answer

Question: 5

Which of the following is a benefit of using key risk indicators (KRIs)?

AReduction in the annual loss expectancy (ALE)

BDetermination of the residual risk value

CAbility to analyze risk trends

DSupport for the incident response process

Show Answer

Isaca CISM Quiz:262 Topic:6 Questions:1306-1310