Isaca CISM Practice Test - Questions Answers, Page 71

A multinational organization is introducing a security governance framework. The information security manager's concern is that regional security practices differ. Which of the following should be evaluated FIRST?

A data loss prevention (DLP) tool has flagged personally identifiable information (Pll) during transmission. Which of the following should the information security manager do FIRST?

Which of the following is the PRIMARY reason for executive management to be involved in establishing an enterprise's security management framework?

Which of the following is the PRIMARY reason for executive management to be involved in establishing an enterprise's security management framework?

An online trading company discovers that a network attack has penetrated the firewall. What should be the information security manager's FIRST response?

After logging in to a web application, additional authentication is checked at various application points. Which of the following is the PRIMARY reason for such an approach?

Which of the following is a function of the information security steering committee?

Which of the following is the MOST important reason for logging firewall activity?

Several months after the installation of a new firewall with intrusion prevention features to block malicious activity, a breach was discovered that came in through the firewall shortly after installation. This breach could have been detected earlier by implementing firewall: