Home / Isaca / CISM

Isaca CISM Practice Test - Questions Answers, Page 75

Question list

List of questions

Question 741

(0)

Which of the following should be the PRIMARY goal of information security?

Question 742

(0)

An experienced information security manager joins a new organization and begins by conducting an audit of all key IT processes. Which of the following findings about the vulnerability management pro

Question 743

(0)

A proposal designed to gain buy-in from senior management for a new security project will be MOST effective if it includes:

Question 744

(0)

Which of the following is a PRIMARY function of an incident response team?

Question 745

(0)

The PRIMARY goal of a post-incident review should be to:

Question 746

(0)

Which of the following is the MOST critical consideration when shifting IT operations to an Infrastructure as a Service (laaS) model hosted in a foreign country?

Question 747

(0)

When remote access is granted to a company's internal network, the MOST important consideration should be that access is provided:

Question 748

(0)

Which of the following is MOST important to the effectiveness of an information security steering committee?

Question 749

(0)

The PRIMARY purpose of conducting a business impact analysis (BIA) is to determine the:

Question 750

(0)

After updating password standards, an information security manager is alerted by various application administrators that the applications they support are incapable of enforcing these standards. The

Question 741

Which of the following should be the PRIMARY goal of information security?

Information management

Regulatory compliance

Data governance

Business alignment

Show Answer Comment (0)

An experienced information security manager joins a new organization and begins by conducting an audit of all key IT processes. Which of the following findings about the vulnerability management program should be of GREATEST concern?

Identified vulnerabilities are not published and communicated in awareness programs.

Identified vulnerabilities are not logged and resolved in a timely manner.

The number of vulnerabilities identified exceeds industry benchmarks. D. Vulnerabilities are identified by internal staff rather than by external consultants.

Show Answer Comment (0)

Question 743

A proposal designed to gain buy-in from senior management for a new security project will be MOST effective if it includes:

analysis of current threat landscape.

historical data of reported incidents.

projected return on investment (ROI).

industry benchmarking gap analysis.

Show Answer Comment (0)

Question 744

Which of the following is a PRIMARY function of an incident response team?

To provide effective incident mitigation

To provide a risk assessment for zero-day vulnerabilities

To provide a single point of contact for critical incidents

To provide a business impact analysis (BIA)

Show Answer Comment (0)

Question 745

The PRIMARY goal of a post-incident review should be to:

establish the cost of the incident to the business.

determine why the incident occurred.

identify policy changes to prevent a recurrence.

determine how to improve the incident handling process.

Show Answer Comment (0)

Question 746

Which of the following is the MOST critical consideration when shifting IT operations to an Infrastructure as a Service (laaS) model hosted in a foreign country?

Labeling of data may help to ensure data is assigned to the correct cloud type.

Laws and regulations of the origin country may not be applicable.

There may be liabilities and penalties in the event of a security breach.

Data may be stored in unknown locations and may not be easily retrievable.

Show Answer Comment (0)

Question 747

When remote access is granted to a company's internal network, the MOST important consideration should be that access is provided:

on a need-to-know basis subject to controls.

subject to legal and regulatory requirements.

by the use of a remote access server.

if a robust IT infrastructure exists.

Show Answer Comment (0)

Question 748

Which of the following is MOST important to the effectiveness of an information security steering committee?

The committee has strong regulatory knowledge.

The committee is comprised of representatives from senior management.

The committee has cross-organizational representation.

The committee uses a risk management framework.

Show Answer Comment (0)

Question 749

The PRIMARY purpose of conducting a business impact analysis (BIA) is to determine the:

scope of the business continuity program.

resources needed for business recovery.

recovery time objective (RTO).

scope of the incident response plan.

Show Answer Comment (0)

Question 750

After updating password standards, an information security manager is alerted by various application administrators that the applications they support are incapable of enforcing these standards. The information security manager's FIRST course of action should be to:

determine the potential impact.

reevaluate the standards.

implement compensating controls.

evaluate the cost of replacing the applications.

Show Answer Comment (0)

Total 793 questions