Home / Isaca / CISM

Isaca CISM Practice Test - Questions Answers, Page 73

Question list

List of questions

Question 721

(0)

Which or the following is MOST important to consider when determining backup frequency?

Question 722

(0)

Which of the following is the BEST way to address data availability concerns when outsourcing information security administration?

Question 723

(0)

What should be the FIRST step when implementing data loss prevention (DLP) technology?

Question 724

(0)

In a cloud technology environment, which of the following would pose the GREATEST challenge to the investigation of security incidents?

Question 725

(0)

Which of the following would provide the MOST value to senior management when presenting the results of a risk assessment?

Question 726

(0)

Which of the following is the BEST indicator of a successful intrusion into an organization's systems?

Question 727

(0)

Which of the following BEST enables the restoration of operations after a limited ransomware incident occurs?

Question 728

(0)

Which of the following is MOST important to determine following the discovery and eradication of a malware attack?

Question 729

(0)

What should a global information security manager do FIRST when informed that a new regulation with significant impact will go into effect soon?

Question 730

(0)

An organization has been penalized by regulatory authorities for failing to notify them of a major security breach that may have compromised customer data. Which of the following is MOST likely in n

Question 721

Which or the following is MOST important to consider when determining backup frequency?

Recovery point objective (RPO)

Recovery time objective (RTO)

Allowable interruption window

Maximum tolerable outage (MTO)

Show Answer Comment (0)

Question 722

Which of the following is the BEST way to address data availability concerns when outsourcing information security administration?

Develop service level agreements (SLAs).

Stipulate insurance requirements.

Require nondisclosure agreements (NDAs).

Create contingency plans.

Show Answer Comment (0)

Question 723

What should be the FIRST step when implementing data loss prevention (DLP) technology?

Perform due diligence with vendor candidates.

Build a business case.

Classify the organization's data.

Perform a cost-benefit analysis.

Show Answer Comment (0)

Question 724

In a cloud technology environment, which of the following would pose the GREATEST challenge to the investigation of security incidents?

Access to the hardware

Data encryption

Non-standard event logs

Compressed customer data

Show Answer Comment (0)

Question 725

Which of the following would provide the MOST value to senior management when presenting the results of a risk assessment?

Mapping the risks to the security classification scheme

Illustrating risk on a heat map

Mapping the risks to existing controls

Providing a technical risk assessment report

Show Answer Comment (0)

Question 726

Which of the following is the BEST indicator of a successful intrusion into an organization's systems?

Decrease in internal network traffic

Increase in the number of failed login attempts

Increase in the number of irregular application requests

Decrease in available storage space

Show Answer Comment (0)

Question 727

Which of the following BEST enables the restoration of operations after a limited ransomware incident occurs?

Reliable image backups

Impact assessment

Documented eradication procedures

Root cause analysis

Show Answer Comment (0)

Question 728

Which of the following is MOST important to determine following the discovery and eradication of a malware attack?

The malware entry path

The creator of the malware

The type of malware involved

The method of detecting the malware

Show Answer Comment (0)

Question 729

What should a global information security manager do FIRST when informed that a new regulation with significant impact will go into effect soon?

Perform a privacy impact assessment (PIA).

Perform a vulnerability assessment.

Perform a gap analysis.

Perform a business impact analysis (BIA).

Show Answer Comment (0)

An organization has been penalized by regulatory authorities for failing to notify them of a major security breach that may have compromised customer data. Which of the following is MOST likely in need of review and updating to prevent similar penalties in the future?

Information security policies and procedures

Business continuity plan (BCP)

Incident communication plan

Incident response training program

Show Answer Comment (0)

Total 793 questions