Isaca CISM Quiz 282 Topic 6 Questions 1406-1410

Question: 1

Which of the following is the MOST important delivery outcome of information security governance?

AStrategic alignment

BData classification

CVulnerability assessment

DAsset protection

Show Answer

Question: 2

Which of the following is the NEXT course of action for an incident response team if an Incident cannot be investigated in the allocated time?

ADiscontinue the investigation.

BActivate the business continuity plan (BCP).

CRequest an exception to the service level agreement (SLA).

DEscalate to senior management for resolution.

Show Answer

Question: 3

Which of the following is the MOST likely outcome from the implementation of a security governance framework?

AIncreased availability of information systems

BCompliance with international standards

CCost reduction of information security initiatives

DRealized business value from information security initiatives

Show Answer

Question: 4

What is the role of the information security manager in finalizing contract negotiations with service providers?

ATo obtain a security standard certification from the provider

BTo perform a risk analysis on the outsourcing process

CTo ensure that clauses for periodic audits are included

DTo update security standards for the outsourced process

Show Answer

Question: 5

Which of the following is the MOST important consideration to provide meaningful information security reporting to senior management?

AMapping to business initiatives

BBenchmarking against industry peers

CCommunicating risk in financial terms

DCompliance with industry best practice

Show Answer

Isaca CISM Quiz:282 Topic:6 Questions:1406-1410