Isaca CISM Quiz 147 Topic 7 Questions 731-735

Question: 1

Which of the following is the PRIMARY role of a data custodian?

AClassifying information

BSecuring information

CValidating information

DProcessing information

Show Answer

Question: 2

Which of the following is the MOST important part of an incident response plan?

ARecovery time objective (RTO)

BBusiness impact analysis (BIA)

CRecovery point objective (RPO)

DMean time to report (MTR)

Show Answer

Question: 3

Which of the following is MOST important when selecting an information security metric?

AAligning the metric to the IT strategy

BDefining the metric in quantitative terms

CEnsuring the metric is repeatable

DDefining the metric in qualitative terms

Show Answer

Question: 4

Which of the following is MOST important to the successful implementation of an information security governance framework across the organization?

ASecurity management processes aligned with security objectives

BThe existing organizational security culture

COrganizational security controls deployed in line with regulations

DSecurity policies that adhere to industry best practices

Show Answer

Question: 5

Which of the following is the PRIMARY purpose of red team testing?

ATo establish a baseline incident response program

BTo assess the vulnerability of employees to social engineering

CTo confirm the risk profile of the organization

DTo determine the organization s preparedness for an attack

Show Answer

Isaca CISM Quiz:147 Topic:7 Questions:731-735