Isaca CISM Quiz 318 Topic 6 Questions 1586-1590

Question: 1

An organization is considering a self-service solution for the deployment of virtualized development servers.

AAbility to maintain server security baseline

BGeneration of excessive security event logs

CSegregation of servers from the production environment

DAbility to remain current with patches

Show Answer

Question: 2

An organization wants to integrate information security into its human resource management processes. Which of the following should be the FWST step?

ABenchmark the processes with best practice to identify gaps.

BIdentify information security risk associated with the processes

CAssess the business objectives of the processes

DEvaluate the cost of information security integration

Show Answer

Question: 3

Which of the following would be MOST important to consider when implementing security settings for a new system'

AResults from internal and external audits

BGovernment regulations and related penalties

CBusiness objectives and related IT risk

DIndustry best practices applicable to the business

Show Answer

Question: 4

What is the BST way for a customer to authenticate an e-commerce vendor?

AUse a secure communications protocol for the connection.

BVerify the vendor's certificate with a certificate authority.

CRequest email verification of the order

DEncrypt the order using the vendor s private key

Show Answer

Question: 5

The MAIN reason for an information security manager to monitor industry level changes in the business and FT is to:

Aevaluate the effect of the changes on the levels of residual risk.

Bidentify changes in the risk environment

Cupdate information security policies in accordance with the changes

Dchange business objectives based on potential impact

Show Answer

Isaca CISM Quiz:318 Topic:6 Questions:1586-1590