Isaca CISM Quiz 43 Topic 6 Questions 211-215

Question: 1

Which of the following would BEST enable effective decision-making?

AFormalized acceptance of risk analysis by business management

BA consistent process to analyze new and historical information risk

CA universally applied list of generic threats, impacts, and vulnerabilities

DAnnualized loss estimates determined from past security events

Show Answer

Question: 2

The PRIMARY purpose of establishing an information security governance framework should be to:

Aalign information security strategy and investments to support organizational activities.

Bdocument and communicate how the information security program functions within the organization.

Cestablish the business case for strategic integration of information security in organizational efforts.

Dalign corporate governance, activities, and investments to information security goals.

Show Answer

Question: 3

Organization A offers e-commerce services and uses secure transport protocol to protect Internet communication. To confirm communication with Organization A, which of the following would be the BEST for a client to verify?

AThe URL of the 6-commerce server

BThe certificate of the e-commerce server

CThe browser's indication of SSL use

DThe IP address of the e-commerce server

Show Answer

Question: 4

When establishing escalation processes for an organization's computer security incident response team, the organization's procedures should:

Aspecify step-by-step escalation paths to ensure an appropriate chain of command.

Brequire events to be escalated whenever possible to ensure that management is kept informed.

Cprovide unrestricted communication channels to executive leadership to ensure direct access.

Drecommend the same communication path for events to ensure consistency of communication.

Show Answer

Question: 5

Which of the following processes can be used to remediate identified technical vulnerabilities?

AEnforcing baseline configurations

BUpdating the business impact analysis (BIA)

CConducting a risk assessment

DPerforming penetration testing

Show Answer

Isaca CISM Quiz:43 Topic:6 Questions:211-215