Isaca CISM Quiz 216 Topic 7 Questions 1076-1080

Question: 1

Which of the following is the BEST reason to develop comprehensive information security policies?

ATo align the information security program to organizational strategy

BTo comply with external industry and government regulations

CTo support development of effective risk indicators

DTo gain senior management support for the information security program

Show Answer

Question: 2

In which of the following ways can an information security manager BEST ensure that security controls are adequate for supporting business goals and objectives?

AEnforcing strict disciplinary procedures in case of noncompliance

BUsing the risk management process

CReviewing results of the annual company external audit

DAdopting internationally accepted controls

Show Answer

Question: 3

After a security incident has been contained, which of the following should be done FIRST?

ANotify local authorities.

BPerform a complete wipe of the affected system.

CConduct forensic analysis.

DRestore the affected system from backup.

Show Answer

Question: 4

Which of the following is MOST critical for an effective information security governance framework?

AThe CIO is accountable for the information security program.

BThe information security program is continually monitored.

CBoard members are committed to the information security program

DInformation security policies are reviewed on a regular basis.

Show Answer

Question: 5

BEST way to isolate corporate data stored on employee-owned mobile devices would be to implement:

Aa sandbox environment

Bdevice encryption,

Ctwo-factor authentication

Da strong password policy

Show Answer

Isaca CISM Quiz:216 Topic:7 Questions:1076-1080