Isaca CISM Quiz 294 Topic 7 Questions 1466-1470

Question: 1

Which of the following is MOST important for the effectiveness of an incident response function?

AAutomated modem tracking and reporting tools

BEnterprise security management system and forensic tools

CTraining of all users on when and how to report

DEstablishing prior contacts with law enforcement

Show Answer

Question: 2

Which of the following methods BEST ensures that a comprehensive approach is used to direct information security activities?

AEstablishing a steering committee

BMolding periodic meetings with business owners

CCreating communication channels

DPromoting security training

Show Answer

Question: 3

Utilizing external resources for highly technical information security tasks allows an information security manager to:

Aoutsource responsibility,

Bleverage limited resources,

Ctransfer business risk,

Ddistribute technology risk

Show Answer

Question: 4

An organization is considering the purchase of a competitor. To determine the competitor's security posture, the BEST course of action for the organization's information security manager would be to:

Aassess the key technical controls of the competitor.

Bassess the security policy of the competitor.

Cconduct a penetration test of the competitor,

Dperform a security gap analysis on the competitor.

Show Answer

Question: 5

An organization's security was compromised by outside attackers. The organization believed that the incident was resolved. After a few days, the IT staff is still noticing unusual network traffic. Which of the following is the BEST course of action to address this situation?

AIdentify potential incident impact.

BAssess the level of the residual risk.

CInitiate the incident response process.

DImplement additional incident response monitoring tools.

Show Answer

Isaca CISM Quiz:294 Topic:7 Questions:1466-1470