Home / Isaca / CISM

Isaca CISM Practice Test - Questions Answers, Page 76

Question list

List of questions

Question 751

(0)

Which of the following is the BEST defense against a brute force attack?

Question 752

(0)

Which of the following should be the NEXT step after a security incident has been reported?

Question 753

(0)

Which of the following is the BEST source of information to support an organization's information security vision and strategy?

Question 754

(0)

Which of the following is MOST important to ensuring that incident management plans are executed effectively?

Question 755

(0)

Which of the following is the PRIMARY reason to conduct a post-incident review?

Question 756

(0)

How does an organization PRIMARILY benefit from the creation of an information security steering committee?

Question 757

(0)

Unintentional behavior by an employee caused a major data loss incident. Which of the following is the BEST way for the information security manager to prevent recurrence within the organization?

Question 758

(0)

Business objectives and organizational risk appetite are MOST useful inputs to the development of information security:

Question 759

(0)

An information security team plans to strengthen authentication requirements for a customer-facing site, but there are concerns it will negatively impact the user experience. Which of the following

Question 760

(0)

When establishing classifications of security incidents for the development of an incident response plan, which of the following provides the MOST valuable input?

Question 751

Which of the following is the BEST defense against a brute force attack?

Time-of-day restrictions

Mandatory access control

Discretionary access control

Multi-factor authentication (MFA)

Show Answer Comment (0)

Question 752

Which of the following should be the NEXT step after a security incident has been reported?

Recovery

Investigation

Escalation

Containment

Show Answer Comment (0)

Question 753

Which of the following is the BEST source of information to support an organization's information security vision and strategy?

Metrics dashboard

Governance policies

Capability maturity model

Enterprise information security architecture

Show Answer Comment (0)

Question 754

Which of the following is MOST important to ensuring that incident management plans are executed effectively?

Management support and approval has been obtained.

The incident response team has the appropriate training.

An incident response maturity assessment has been conducted.

A reputable managed security services provider has been engaged.

Show Answer Comment (0)

Question 755

Which of the following is the PRIMARY reason to conduct a post-incident review?

To aid in future risk assessments

To improve the response process

To determine whether digital evidence is admissible

To notify regulatory authorities

Show Answer Comment (0)

Question 756

How does an organization PRIMARILY benefit from the creation of an information security steering committee?

An increase in information security risk awareness

An increased alignment with industry security trends that impact the business

An increased focus on information security resource management

An increased alignment of information security with the business

Show Answer Comment (0)

Question 757

Unintentional behavior by an employee caused a major data loss incident. Which of the following is the BEST way for the information security manager to prevent recurrence within the organization?

Implement compensating controls.

Communicate consequences for future instances.

Enhance the data loss prevention (DLP) solution.

Improve the security awareness training program.

Show Answer Comment (0)

Question 758

Business objectives and organizational risk appetite are MOST useful inputs to the development of information security:

strategy.

risk assessments.

key performance indicators (KPIs).

standards.

Show Answer Comment (0)

An information security team plans to strengthen authentication requirements for a customer-facing site, but there are concerns it will negatively impact the user experience. Which of the following is the information security manager's BEST course of action?

Assess business impact against security risk.

Provide security awareness training to customers.

Refer to industry best practices.

Quantify the security risk to the business.

Show Answer Comment (0)

Question 760

When establishing classifications of security incidents for the development of an incident response plan, which of the following provides the MOST valuable input?

Business impact analysis (BIA) results

Vulnerability assessment results

The business continuity plan (BCP)

Recommendations from senior management

Show Answer Comment (0)

Total 793 questions