Isaca CISM Quiz 121 Topic 7 Questions 601-605

Question: 1

An organization s senior management is encouraging employees to use social media for promotional purposes. Which of t following should be the information security manager's FIRST step to support this strategy?

ADevelop a guideline on the acceptable use of social media

BIncorporate social media into the security awareness program.

CDevelop a business case for a data toss prevention (DLP) solution.

DEmploy the use of a web content filtering solution.

Show Answer

Question: 2

Which of the following is the MOST important consideration when establishing an information security governance framework?

ASecurity steering committee meetings are held at least monthly

BExecutive management support is obtained

CMembers of the security steering committee are trained in information security.

DBusiness unit management acceptance is obtained

Show Answer

Question: 3

Which of the following provides the MOST relevant evidence of incident response maturity?

ARed team testing results

BAverage incident closure time

CIndependent audit assessment

DTabletop exercise results

Show Answer

Question: 4

In an organization with effective IT risk management, the PRIMARY reason to establish key risk indicators (KRIs) is to:

Aprovide information to remediate risk events.

Bdemonstrate the alignment of risk management efforts.

Cmap potential risk to key organizational strategic initiatives.

Didentify triggers that exceed risk thresholds

Show Answer

Question: 5

What would be an information security manager's BEST course of action when notified that the implementation of some security controls is being delayed due to budget constraints?

APrioritize security controls based on risk.

BRequest a budget exception for the security controls

CBegin the risk acceptance process

DSuggest less expensive alternative security controls.

Show Answer

Isaca CISM Quiz:121 Topic:7 Questions:601-605