Isaca CISM Quiz 310 Topic 6 Questions 1546-1550

Question: 1

Which of the following is the FIRST step in developing a business continuity plan (BCPY}?

ADetermine the business recovery strategy.

BIdentify the applications with the shortest recovery time objectives (RTOs).

CDetermine available resources.

DIdentify critical business processes.

Show Answer

Question: 2

When outsourcing application development to a third party, which of the following is the BEST way to ensure the organization's security requirements are met?

APerform independent security testing of the developed applications

BInclude a right to audit the system development lifecycle in the contract.

CRequire the third-party provider to document its security methodology.

DProvide training in secure application coding to the third-party staff.

Show Answer

Question: 3

Which of the following is MOST important to include when developing a business case for information security resources?

AGap analysis

BSenior management input

CRisk assessment

DCost-benefit analysis

Show Answer

Question: 4

Which of the following will BEST facilitate informed decision making when presenting an information security risk assessment report to senior management?

AUtilizing color coding to indicate risk impacts to the business

BPrioritizing residual risks

CBenchmarking risk assessment results

DPresenting risk assessment results regularly

Show Answer

Question: 5

Which of the following is the PRIMARY advantage of using an incident severity rating system'?

AIt enables risk information to be updated.

BIt provides senior management with visibility to the criticality.

CIt allows the detection of an incident as it is occurring.

DIt enables efficient incident response.

Show Answer

Isaca CISM Quiz:310 Topic:6 Questions:1546-1550