Isaca CISM Quiz 97 Topic 6 Questions 481-485

Question: 1

Which of the following is the BEST way to prevent employees from making unauthorized comments to the media about security incidents in progress?

AEstablish standard media responses for employees to control the message

BCommunicate potential disciplinary actions for noncompliance.

CInclude communication policies In regular information security training

Dtraining Implement controls to prevent discussion with media during an Incident.

Show Answer

Question: 2

During which phase of an incident response process should corrective actions to the response procedure be considered and implemented?

AReview

BIdentification

CEradication

DContainment

Show Answer

Question: 3

A threat intelligence report indicates there has been a significant rise in the number of attacks targeting the industry. What should the information security manager do NEXT?

ADiscuss the risk with senior management.

BConduct penetration testing to identity vulnerabilities.

CAllocate additional resources to monitor perimeter security systems,

DUpdate the organization's security awareness campaign.

Show Answer

Question: 4

Which of the following would BEST justify spending for a compensating control?

ARisk analysis

BVulnerability analysis

CThreats analysis

DPeer benchmarking

Show Answer

Question: 5

Which of the following would be of GREATEST concern to an information security manager when evaluating a cloud service provider (CSP)?

ASecurity controls offered by the provider are inadequate

BService level agreements (SLAs) art not well defined.

CData retention policies may be violated.

DThere is no right to audit the security of the provider

Show Answer

Isaca CISM Quiz:97 Topic:6 Questions:481-485