Isaca CISM Quiz 185 Topic 7 Questions 921-925

Question: 1

Which of the following is the GREATEST risk of single sign-on?

AIntegration of single sign-on with the rest of the infrastructure is complicated

BIt is a single point of failure for an enterprise access control process.

CPassword carelessness by one user may render the entire infrastructure vulnerable

DOne administrator maintains the single sign-on solutions without segregation of duty.

Show Answer

Question: 2

Which of the following BIST validates that security controls are implemented in a new business process?

AAssess the process according to information security policy

BBenchmark the process against industry practices

CVerify the use of a recognized control framework

DReview the process for conformance with information security best practices

Show Answer

Question: 3

When customer data has been compromised, an organization should contact law enforcement authorities:

Aif there is potential impact to the organization.

Bin accordance with the corporate communication policy.

Cif the attack comes from an international source.

Dwhen directed by the information security manager.

Show Answer

Question: 4

Without prior approval, a training department enrolled the company in a free cloud-based collaboration site and invited employees to use it. Which of the following is the BEST response of the information security manager?

AConduct a risk assessment and develop an impact analysis.

BReport the activity to senior management.

CUpdate the risk register and review the information security strategy.

DAllow temporary use of the site and monitor for data leakage.

Show Answer

Question: 5

The MOST important reason that security risk assesements should be conducted frequently through an organization is because:

AThreats to the organization may change

BCompliance with legal and regulatory should be reassessed.

CControls should be regularly tested.

DControl effectiveness may weaken.

Show Answer

Isaca CISM Quiz:185 Topic:7 Questions:921-925