Isaca CISM Quiz 278 Topic 7 Questions 1386-1390

Question: 1

Which of the following would MOST effectively help to restrict sensitive data from being transmitted outside the organization?

AIntrusion detection system (IDS)

BData forensics

CData loss prevention (DLP)

DSecurity information and event management (SIEM)

Show Answer

Question: 2

Which of the following roles should be separated?

AHelp desk and security administration

BFirewall management and security operations

CSystems analysis and application programming

DData security and database administration

Show Answer

Question: 3

An information security manager is reviewing the business case for a security project that is entering the development phase It is determined that the estimates cost of the controls is now greater than the risk being mitigated. What is the information security manager's BEST recommendation?

ASlow the pace of the project to spread costs over a longer period.

BDiscontinue the project to release funds for other efforts

CEliminate some of the controls from the project scope.

DPursue the project until the benefits cover the costs.

Show Answer

Question: 4

Which of the following has the MOST influence on an organization's adoption of information security policies?

AEnforcement of penalties for noncompliance

BA comprehensive security awareness program

CDemonstrated senior management commitment

DEstablished key performance indicators (KPIs)

Show Answer

Question: 5

Which of the following provides the BEST evidence that a control is being applied effectively?

AKey risk indicators (KUIs)

BKey performance indicators (KPIs)

CBusiness impact analysis (BIA)

DNumber of incidents reported

Show Answer

Isaca CISM Quiz:278 Topic:7 Questions:1386-1390