Isaca CISM Practice Test - Questions Answers, Page 62

Which of the following is the BEST way to ensure data is not co-mingled or exposed when using a cloud service provider?

An organization involved in e-commerce activities operating from its home country opened a new office in another country with stringent security laws. In this scenario, the overall security strategy should be based on:

When developing an information security strategy for an organization, which of the following is MOST helpful for understanding where to focus efforts?

Which of the following would be of GREATEST assistance in determining whether to accept residual risk of a critical security system?

Which of the following is the BEST control to protect customer personal information that is stored in the cloud?

An organization is experiencing a sharp increase in incidents related to phishing messages. The root cause is an outdated email filtering system that is no longer supported by the vendor. Which of the following should be the information security manager's FIRST course of action?

Which of the following should an information security manager do FIRST to address the risk associated with a new third-party cloud application that will not meet organizational security requirements?

Which of the following is the PRIMARY purpose of an acceptable use policy?

Which of the following metrics BEST demonstrates the effectiveness of an organization's security awareness program?