Isaca CISM Quiz 290 Topic 7 Questions 1446-1450

Question: 1

Which of the following BEST indicates the value a purchased information security solution brings to an organization?

ACost savings the solution brings to the information security department

BDegree to which the solution matures the information security program

CCosts and benefits of the solution calculated over time

DAlignment to security threats and risks

Show Answer

Question: 2

Which of the following is the MOST effective way to incorporate risk management practices into a new business process?

AConduct quality assurance reviews.

BReview threat assessments.

CUpdate company policies.

DEnforce change management.

Show Answer

Question: 3

An incident response team has determined there is a need to isolate a system that is communicating with a known malicious host on the Internet, following stakeholders should be contacted FIRST?

AThe business owner

BKey customers

CSystem administrator

DExecutive management

Show Answer

Question: 4

Which of the following should be done FIRST when considering a new security initiative?

AConduct a benchmarking exercise.

BConduct a feasibility study.

CPerform a cost-benefit analysis.

DDevelop a business case.

Show Answer

Question: 5

Which of the following is the BEST way to monitor for advanced persistent threats (APT) in an organization?

ASearch for threat signatures in the environment.

BNetwork with peers in the industry to share information

CSearch for anomalies in the environment.

DBrowse the Internet to learn of potential events.

Show Answer

Isaca CISM Quiz:290 Topic:7 Questions:1446-1450