Isaca CISM Quiz 87 Topic 7 Questions 431-435

Question: 1

Which of the following would provide the MOST effective security outcome in an organization s contract management process?

APerforming vendor security benchmark analyses at the request-for proposal (FRP) stage

BEnsuring security requirements are defined at the request-for-proposal (RFP) stage.

CExtending security assessment to cover asset disposal on contract termination

DExtending security assessment to include random penetration testing

Show Answer

Question: 2

Which of the following should be the PRIMARY objective when establishing a new information security program?

AExecuting the security strategy

BOptimizing resources

CFacilitating operational security

DAchieving regulatory compliance

Show Answer

Question: 3

To minimize the business impact from information security incidents it is MOST important to

AAttain timely identification of incidents.

BStreamline the post-incident review process.

CKeep all incident-related data confidential.

Dreduce staff costs for incident recovery

Show Answer

Question: 4

Which of the following is the BEST way to ensure that responses to incidents in high-risk areas of the business are earned out m an organized manner?

AManagement approval of the incident response plan

BRole differentiation in the incident response plan

CAppropriate communication of the incident response plan

DPeriodic testing of the incident response plan

Show Answer

Question: 5

Which of the following BEST enables an information security manager to assess the effectiveness of the information security program?

APenetration testing results

BRisk register

CMaturity level

DInformation security architecture

Show Answer

Isaca CISM Quiz:87 Topic:7 Questions:431-435