Isaca CISM Quiz 67 Topic 7 Questions 331-335

Question: 1

An information security manager was informed that a planned penetration test could potentially disrupt some services. Which of the following should be the FIRST course of action?

AEnsure the service owner is available during the penetration test.

BAccept the risk and document it in the risk register.

CEstimate the impact and inform the business owner.

DReschedule the activity during an approved maintenance window.

Show Answer

Question: 2

Which of the following should an information security manager do FIRST to address complaints that a newly implemented security control has slowed business operations?

ADiscuss the issue with senior management for direction.

BValidate whether the control is operating as intended.

CRemove the control and identify alternatives.

DConduct user awareness training.

Show Answer

Question: 3

Which of the following is an information security manager's FIRST priority after a high-profile system has been compromised?

AImplement improvements to prevent recurrence.

BIdentify the malware that compromised the system.

CPreserve incident-related data.

DRestore the compromised system.

Show Answer

Question: 4

The MOST important reason for an information security manager to be involved in the change management process is to ensure that:

Asecurity controls are updated regularly.

Bpotential vulnerabilities are identified.

Crisks have been evaluated.

Dsecurity controls drive technology changes.

Show Answer

Question: 5

Which of the following metrics provides the BEST measurement of the effectiveness of a security awareness program?

AMean time between incident detection and remediation

BVariance of program cost to allocated budget

CThe number of reported security incidents

DThe number of security breaches

Show Answer

Isaca CISM Quiz:67 Topic:7 Questions:331-335