Isaca CISM Quiz 224 Topic 7 Questions 1116-1120

Question: 1

Which of the following is MOST critical to the successful implementation of information security within an organization?

AStrong risk management skills exist within the information security group.

BThe information security manager is responsible for setting information security policy.

CBudget is allocated for information security tools

DSecurity is effectively marketed to all managers and employees,

Show Answer

Question: 2

The MOST important reason to maintain key risk indicators (KRIs) is that:

Athreats and vulnerabilities continuously evolve.

Bthey help assess the performance of the security program.

Cthey are needed to verify compliance with laws and regulations

Dmanagement uses them to make informed business decisions.

Show Answer

Question: 3

The PRIMARY purpose of a security information and event management (SIEM) system is to:

Aprovide status of incidents

Bresolve incidents

Ctrack ongoing incidents

Didentify potential incidents.

Show Answer

Question: 4

Which of the following is BEST to include in a business case when the return on investment (RIO) for an information security initiative is difficult to calculate?

AProjected increase in maturity level

BEstimated increase in efficiency

CProjected costs over time

DEstimated reduction in risk

Show Answer

Question: 5

Which of the following is the PRIMARY reason an information security strategy should be deployed across an organization?

ATo ensure that security-related industry best practices are adopted

BTo ensure that employees adhere to security standards

CTo ensure that the business complies with security regulations

DTo ensure that management's intent is reflected in security activities

Show Answer

Isaca CISM Quiz:224 Topic:7 Questions:1116-1120