Isaca CISM Quiz 257 Topic 1 Questions 1281-1285

Question: 1

Which of the following is an organization's BEST approach for media communications when experiencing a disaster?

AHold a press conference and advise the media to refer to legal authorities.

BDefer public comment until partial recovery has been achieved.

CReport high-level details of the losses and recovery strategy to the media.

DAuthorize a qualified representative to convey specially drafted messages.

Show Answer

Question: 2

Which of the following is MOST important for an information security manager to ensure when evaluating change requests?

AResidual risk is within risk tolerance.

BRequests are approved by process owners.

CContingency plans have been created.

DRequests add value to the business.

Show Answer

Question: 3

Which of the following is the PRIMARY purpose for defining key performance indicators (KPIs) for a security program?

ATo ensure controls meet regulatory requirements

BTo compare security program effectiveness to best practice

CTo evaluate the performance of security staff

DTo measure the effectiveness of the security program

Show Answer

Question: 4

Which of the following should be the PRIMARY basis for determining risk appetite?

AIndependent audit results

BOrganizational objectives

CIndustry benchmarks

DSenior management input

Show Answer

Question: 5

Which of the following should be the MOST important consideration when reporting sensitive risk-related information to stakeholders?

ACustomizing the communication to the audience

BEnsuring nonrepudiation of communication

CTransmitting the internal communication securely

DConsulting with the public relations director

Show Answer

Isaca CISM Quiz:257 Topic:1 Questions:1281-1285