Isaca CISM Quiz 9 Topic 6 Questions 41-45

Question: 1

Which of the following should be an information security manager's MAIN concern if the same digital signing certificate is able to be used by two or more users?

ACertificate alteration

BPotential to decrypt digital hash values

CSegregation of duties

DInability to validate identity of sender

Show Answer

Question: 2

What would be the MAIN purpose of an immediate post-incident review after a comprehensive test of the incident response plan?

ATo revalidate incident response plan activities

BTo reduce costs associated with incident response efforts

CTo determine ways to improve incident response plan processes

DTo document weaknesses for the next incident response plan test

Show Answer

Question: 3

Recommendations for enterprise investment in security technology should be PRIMARILY based on:

Aalignment with business needs.

Bavailability of financial resources.

Cthe organization's risk tolerance,

Dadherence to international standards.

Show Answer

Question: 4

Which of the following should be the PRIMARY goal of information security?

ARegulatory compliance

BData governance

CBusiness alignment

DInformation management

Show Answer

Question: 5

Embedding security responsibilities into job descriptions is important PRIMARILY because it:

Asupports access management.

Bsimplifies development of the security awareness program.

Cstrengthens employee accountability.

Daligns security to the human resources (HR) function.

Show Answer

Isaca CISM Quiz:9 Topic:6 Questions:41-45