Home / Isaca / CISM

Isaca CISM Practice Test - Questions Answers, Page 71

Question list

List of questions

Question 701

(0)

Which of the following is the MOST effective way to address an organizations security concerns during contract negotiations with a third party?

Question 702

(0)

A multinational organization is introducing a security governance framework. The information security manager's concern is that regional security practices differ. Which of the following should be e

Question 703

(0)

A data loss prevention (DLP) tool has flagged personally identifiable information (Pll) during transmission. Which of the following should the information security manager do FIRST?

Question 704

(0)

Which of the following is the PRIMARY reason for executive management to be involved in establishing an enterprise's security management framework?

Question 705

(0)

Which of the following is the PRIMARY reason for executive management to be involved in establishing an enterprise's security management framework?

Question 706

(0)

An online trading company discovers that a network attack has penetrated the firewall. What should be the information security manager's FIRST response?

Question 707

(0)

After logging in to a web application, additional authentication is checked at various application points. Which of the following is the PRIMARY reason for such an approach?

Question 708

(0)

Which of the following is a function of the information security steering committee?

Question 709

(0)

Which of the following is the MOST important reason for logging firewall activity?

Question 710

(0)

Several months after the installation of a new firewall with intrusion prevention features to block malicious activity, a breach was discovered that came in through the firewall shortly after instal

Question 701

Which of the following is the MOST effective way to address an organizations security concerns during contract negotiations with a third party?

Ensure security is involved in the procurement process.

Review the third-party contract with the organization's legal department.

Conduct an information security audit on the third-party vendor.

Communicate security policy with the third-party vendor.

Show Answer Comment (0)

A multinational organization is introducing a security governance framework. The information security manager's concern is that regional security practices differ. Which of the following should be evaluated FIRST?

Local regulatory requirements

Global framework standards

Cross-border data mobility

Training requirements of the framework

Show Answer Comment (0)

Question 703

A data loss prevention (DLP) tool has flagged personally identifiable information (Pll) during transmission. Which of the following should the information security manager do FIRST?

Validate the scope and impact with the business process owner.

Initiate the incident response plan.

Review and validate the rules within the DLP system.

Escalate the issue to senior management.

Show Answer Comment (0)

Question 704

Which of the following is the PRIMARY reason for executive management to be involved in establishing an enterprise's security management framework?

To ensure industry best practices for enterprise security are followed

To establish the minimum level of controls needed

To determine the desired state of enterprise security

To satisfy auditors' recommendations for enterprise security

Show Answer Comment (0)

Question 705

Which of the following is the PRIMARY reason for executive management to be involved in establishing an enterprise's security management framework?

To ensure industry best practices for enterprise security are followed

To establish the minimum level of controls needed

To determine the desired state of enterprise security

To satisfy auditors' recommendations for enterprise security

Show Answer Comment (0)

Question 706

An online trading company discovers that a network attack has penetrated the firewall. What should be the information security manager's FIRST response?

Notify the regulatory agency of the incident.

Implement mitigating controls.

Evaluate the impact to the business.

Examine firewall logs to identify the attacker.

Show Answer Comment (0)

Question 707

After logging in to a web application, additional authentication is checked at various application points. Which of the following is the PRIMARY reason for such an approach?

To ensure access rights meet classification requirements

To facilitate the analysis of application logs

To ensure web application availability

To support strong two-factor authentication protocols

Show Answer Comment (0)

Question 708

Which of the following is a function of the information security steering committee?

Deliver external communication during incident response.

Align the security framework with security standards.

Align security strategy with business objectives.

Monitor regulatory requirements.

Show Answer Comment (0)

Question 709

Which of the following is the MOST important reason for logging firewall activity?

Metrics reporting

Firewall tuning

Intrusion prevention

Incident investigation

Show Answer Comment (0)

Question 710

Several months after the installation of a new firewall with intrusion prevention features to block malicious activity, a breach was discovered that came in through the firewall shortly after installation. This breach could have been detected earlier by implementing firewall:

packet filtering.

web surfing controls.

log monitoring.

application awareness.

Show Answer Comment (0)

Total 793 questions