Isaca CISM Quiz 207 Topic 7 Questions 1031-1035

Question: 1

An organization has detected potential risk emerging from noncompliance with new regulations in its industry. Which of the following is the MOST important reason to report this situation to senior management?

AThe risk profile needs to be updated

BAn external review of the risk nods to be conducted

CSpecific monitoring controls need to be implemented

DA benchmark analysis needs to be performed.

Show Answer

Question: 2

Which of the following techniques is MOST useful when an incident response team needs to respond to external attacks on multiple corporate network devices?

AEndpoint baseline configuration analysis

BSecurity event correlation analysis

CVulnerability assessment of network devices

DPenetration testing of network devices

Show Answer

Question: 3

Inadvertent disclosure of internal business information on social media is BEST minimized by which of the following?

AImplementing data loss prevention (DLP) solutions

BDeveloping social media guidelines

CEducating users on social media risks

DLimiting access to social media sites

Show Answer

Question: 4

Which of the following is the BEST reason to separate short-term from long-term plans within an information security roadmap?

ATo update the roadmap according to current risks

BTo allocate resources for initiatives

CTo allow for reactive initiatives

DTo facilitate business plan reporting to management

Show Answer

Question: 5

Exceptions to a security policy should be approved based PRIMARILY on:

Arisk appetite.

Bthe external threat probability.

Cresults of a business impact analysis (BIA).

Dthe number of security incidents.

Show Answer

Isaca CISM Quiz:207 Topic:7 Questions:1031-1035