Isaca CISM Quiz 287 Topic 6 Questions 1431-1435

Question: 1

Which of the following is MOST important for an information security manager to present to senior management on a regular basis?

ADetails of reported vulnerabilities

BChanges to the organization's threat environment

CFalse positives found on the intrusion prevention system

DSecurity controls in place to prevent the threats

Show Answer

Question: 2

An internal security audit has reported that authentication controls are not operating effectively. Which of the following is MOST important to c management?

AThe impact of the control weakness on the risk profile of the organization

BThe results of a business impact analysis (BIA)

CA business case for implementing stronger authentication controls

DAn analysis of the impact of this type of control weakness on other organizations

Show Answer

Question: 3

Which of the following is MOST important for the alignment of an information security program with the information security strategy?

AInput from senior management

BAdoption of an industry recognized framework

CBenchmarking against industry peers

DIdentification of business-specific risk factors

Show Answer

Question: 4

Which of the following should be the GREATEST concern when considering launching a counterattack in response to a network attack?

AIncident impact escalation

BDigital evidence contamination

CDenial of service attacks on the external source

DLegal ramifications

Show Answer

Question: 5

When outsourcing sensitive data to a cloud service provider, which of the following should be the information security manager's MOST important.....

AData stored at the cloud service provider is not co-hosted.

BThe cloud service provider contract includes right to audit.

CAccess authorization includes biometric security verification.

DRoles and responsibilities have been defined for the service provider.

Show Answer

Isaca CISM Quiz:287 Topic:6 Questions:1431-1435