Isaca CISM Quiz 292 Topic 6 Questions 1456-1460

Question: 1

Which of the following is the MOST important security consideration when using Infrastructure as a Service (laaS)?

ACompliance with internal standards

BSegmentation among tenants

CBackup and recovery strategy

DUser access management

Show Answer

Question: 2

When developing an incident response plan, the information security manager should:

Aallow IT to decide which systems can be removed from the infrastructure.

Brequire IT to invoke the business continuity plan (BCP).

Cinclude response scenarios that have been approved previously by business management.

Ddetermine recovery time objectives (RTOs).

Show Answer

Question: 3

The PRIMARY advantage of challenge-response authentication over password authentication is that:

Ait is less expensive to implement.

Bthere is no requirement for end-to-end encryption.

Cuser accounts are less likely to be compromised.

Dcredentials sent across the network are encrypted.

Show Answer

Question: 4

When developing an information security strategy, the MOST important requirement is that:

Aa schedule is developed to achieve objectives.

Bcritical success factors (CSFs) are developed.

Cstandards capture the intent of management.

Dthe desired outcome is known.

Show Answer

Question: 5

Which of the following is the MOST important security consideration when planning to use a cloud service provider in a different country?

AAbility to enforce contractual obligations

BAbility to meet service level agreements (SLAs)

CAbility to logically separate client data

DAbility to meet business resiliency requirements

Show Answer

Isaca CISM Quiz:292 Topic:6 Questions:1456-1460