Isaca CISM Quiz 248 Topic 7 Questions 1236-1240

Question: 1

A risk assessment has been conducted following a data owner's decision to outsource an application to a cloud provider Which of the following should be the information security manager's NEXT course of action?

AConduct an application vulnerability scan

BReview the contract with the cloud provider

CInform senior management

DConduct a security assessment on the cloud provider.

Show Answer

Question: 2

A global organization has developed a strategy to share a customer information database between offices in two countries. In this situation, it is MOST important to ensure:

Adata is encrypted in transit and at rest

Bdata sharing complies with local laws and regulations at both locations.

Ca nondisclosure agreement is signed.

Drisk coverage is split between the two locations sharing data.

Show Answer

Question: 3

A risk management program will be MOST effective when:

Abusiness units are involved in risk assessments,

Brisk assessments are conducted by a third party.

Crisk appetite is sustained for a long period risk

Dassessments are repeated periodically

Show Answer

Question: 4

The PRIMARY reason for using information security metrics is to:

Aachieve senior management commitment.

Badhere to legal and regulatory requirements

Cmonitor the effectiveness of controls

Densure alignment with corporate requirements.

Show Answer

Question: 5

Which of the following provides the BEST indication that the information security program is in alignment with enterprise requirements?

ASecurity strategy objectives are defined in business terms.

BAn IT governance committee is m place.

CThe security strategy is benchmarked with similar organizations

DThe information security manager reports to the chief executive officer.

Show Answer

Isaca CISM Quiz:248 Topic:7 Questions:1236-1240