Isaca CISM Quiz 114 Topic 7 Questions 566-570

Question: 1

Which of the following should be the PRIMARY expectation of management when an organization introduces an information security governance framework?

AOptimized information security resources

BConsistent execution of information security strategy

CImproved accountability to shareholders

DIncreased influence of security management

Show Answer

Question: 2

The MOST likely cause of a security information event monitoring (SIEM) solution failing to identify a serious incident is that the system:

Ahas not been updated with the latest patches

Bis hosted by a cloud service provider

Chas performance issues

Dis not collecting logs from relevant devices.

Show Answer

Question: 3

Which of the following is the MOST important outcome from vulnerability scanning?

APrioritization of risks

BInformation about steps necessary to hack the system

CIdentification of back doors

DVerification that systems are property configured

Show Answer

Question: 4

Executive management is considering outsourcing all IT operations. Which of the following functions should remain internal?

AData encryption

BData ownership

CData custodian

DData monitoring

Show Answer

Question: 5

Which of the following BEST demonstrates that an organization supports information security governance?

AEmployees attend annual organization-wide security training.

BInformation security policies are readily available to employees.

CThe incident response plan is documented and tested regularly.

DInformation security steering committee meetings are held regularly.

Show Answer

Isaca CISM Quiz:114 Topic:7 Questions:566-570