Isaca CISM Quiz 193 Topic 7 Questions 961-965

Question: 1

Which of the following should be done FIRST when handling multiple confirmed incidents raised at the same time?

ACategorize incidents by the value of the affected asset.

BUpdate the business impact assessment.

CActivate the business continuity plan (BCP).

DInform senior management.

Show Answer

Question: 2

Which of the following is the BEST approach to identify noncompliance issues with legal, regulatory, and contractual requirements?

ARisk assessment

BGap analysis

CVulnerability assessment

DBusiness impact analysis (B1A)

Show Answer

Question: 3

The BEST defense against phishing attempts within an organization is:

Aan intrusion detection system (IDS).

Ban intrusion protection system (IPS).

Cstrengthening of firewall rules.

Dfiltering of e-mail.

Show Answer

Question: 4

Which of the following provides the GREATEST assurance that an organization allocates appropriate resources to respond to information security events?

AInformation security policies and standards

BThreat analysis and intelligence reports

CIncident classification procedures

DAn approved IT staffing plan

Show Answer

Question: 5

Which of the following is the BEST evidence that an organization's information security governance framework is effective?

AThe framework can adapt to organizational changes.

BThe risk register is reviewed annually.

CThreats to the organization have diminished.

DThe framework focuses primarily on technical controls.

Show Answer

Isaca CISM Quiz:193 Topic:7 Questions:961-965