Isaca CISM Quiz 291 Topic 6 Questions 1451-1455

Question: 1

Which of the following would BEST enable an effective response to a network-based attack?

ADeploying counterattacks on the source network

BMaintaining an incident playbook

CEnabling network time protocol synchronization

DNotifying the network service provider of incidents

Show Answer

Question: 2

Which of the following BEST enables new third-party suppliers to support an organization's information security objectives?

AMandating a right-to-audit clause in supplier contracts

BRequiring approval of new suppliers by the information security manager

CConducting security awareness training courses for third parties

DAddressing security risk in the supplier sourcing process

Show Answer

Question: 3

When creating a bring your own device (BYOD) program, it is MOST important to:

Aensure the organization's ownership of data and management of the device.

Bestablish metrics to evaluate the effectiveness of the program.

Cdevelop remote wipe capabilities and procedures.

Dbalance the costs between private versus business usage and define the method to track usage.

Show Answer

Question: 4

Which of the following is the GREATEST benefit of information asset classification?

ASupporting segregation of duties

BDefining resource ownership

CHelping to determine the recovery point objective (RPO)

DProviding a basis for implementing a need-to-know policy

Show Answer

Question: 5

Which of the following is a PRIMARY responsibility of a data owner?

AConducting data privacy impact assessments

BApproving access to information

CPerforming user access audits

DProcessing entitlement changes

Show Answer

Isaca CISM Quiz:291 Topic:6 Questions:1451-1455