Isaca CISM Quiz 201 Topic 7 Questions 1001-1005

Question: 1

Which of the following provides the BEST opportunity to evaluate the capabilities of incident response team members?

ABlack box penetration test

BBreach simulation exercise

CDisaster recovery exercise

DTabletop test

Show Answer

Question: 2

When creating an information security governance program, which of the following will BEST enable the organization to address regulatory compliance requirements?

AA security control framework

BInput from the security steering committee

CGuidelines for processes and procedures

DAn approved security strategy plan

Show Answer

Question: 3

Ensuring that activities performed by outsourcing providers comply with information security policies can BEST be accomplished through the use of:

Acontractual obligations.

BIndependent audits

Cservice level agreements (SLAs).

Dindustry standard alignment.

Show Answer

Question: 4

Which of the following is BEST performed by the security department?

AApproving standards for accessing the operating system

BProvisioning users to access the operating system

CLogging unauthorized access to the operating system

DManaging user profiles for accessing the operating system

Show Answer

Question: 5

Which of the following is the MOST effective method to help ensure information security incidents are reported?

AIntegrating information security language in corporate compliance rules

BProviding information security awareness training to employees

CImplementing an incident management system

DIntegrating information security language in conditions of employment

Show Answer

Isaca CISM Quiz:201 Topic:7 Questions:1001-1005