Isaca CISM Quiz 14 Topic 7 Questions 66-70

Question: 1

When considering whether to adopt bring your own device (BYOD). it is MOST important for the information security manager to ensure that:

Asecurity controls are applied to each device when joining the network.

Bthe applications are tested prior to implementation.

Cusers have read and signed acceptable use agreements.

Dbusiness leaders have an understanding of security risks.

Show Answer

Question: 2

Which of the following is the MOST effective way to detect security incidents?

AAnalyze recent security risk assessments.

BAnalyze security anomalies.

CAnalyze vulnerability assessments.

DAnalyze penetration test results.

Show Answer

Question: 3

Which of the following is the MOST important constraint to be considered when developing an information security strategy?

ALegal and regulatory requirements

BEstablished security policies and standards

CCompliance with an international security standard

DInformation security architecture

Show Answer

Question: 4

When preventive controls to appropriately mitigate risk are not feasible, which of the following is the MOST important action for the information security manager?

AEvaluating potential threats

BIdentifying unacceptable risk levels

CAssessing vulnerabilities

DManaging the impact

Show Answer

Question: 5

For the information security manager, integrating the various assurance functions of an organization is important PRIMARILY to enable:

Aconsistent security.

Ba security-aware culture.

Ccomprehensive audits.

Dcompliance with policy.

Show Answer

Isaca CISM Quiz:14 Topic:7 Questions:66-70