Isaca CISM Quiz 295 Topic 7 Questions 1471-1475

Question: 1

An organization has remediated a security flaw in a system Which of the following should be done NEXT?

AAllocate budget for penetration testing

BAssess the residual risk

CUpdate the system's documentation

DShare lessons learned with the organization

Show Answer

Question: 2

During which process is regression testing MOST commonly used?

ASystem modification

BProgram development

CUnit testing

DStress testing

Show Answer

Question: 3

Which of the following is MOST helpful to an information security manager when determining service level requirements for an outsourced application?

AData classification

BInformation security policy

CBusiness functionality

DApplication capabilities

Show Answer

Question: 4

Which of the following is the GREATEST benefit of integrating a security information and event management (SIEM) solution with traditional security tools such as IDS, anti-malware. and email screening solutions?

AThe elimination of false positive detections

BA reduction in operational costs

CAn increase in visibility into patterns of potential threats

DThe consolidation of tools into a single console

Show Answer

Question: 5

Which of the following is MOST relevant for an information security manager to communicate to IT operations?

AVulnerability assessments

BThe level of exposure

CThe level of inherent risk

DThreat assessments

Show Answer

Isaca CISM Quiz:295 Topic:7 Questions:1471-1475