Isaca CISM Quiz 258 Topic 1 Questions 1286-1290

Question: 1

Which of the following will BEST facilitate the development of appropriate incident response procedures?

APerforming vulnerability assessments

BAssessing capability maturity

CConducting scenario testing

DAnalyzing key risk indicators (KRIs)

Show Answer

Question: 2

Which of the following is the MOST important reason to have documented security procedures and guidelines?

ATo facilitate collection of security metrics

BTo meet regulatory compliance requirements

CTo allocate security responsibilities to staff

DTo enable standard security practices

Show Answer

Question: 3

Which of the following should provide the PRIMARY justification to approve the implementation of a disaster recovery (DR) site on the recommendation of an external audit report?

ARecovery time objectives (RTOs)

BRegulatory requirements

CCost-benefit analysis

DSecurity controls at the DR site

Show Answer

Question: 4

Which of the following is MOST important to consider when developing a business continuity plan (BCP)?

ADisaster recovery plan (DRP)

BBusiness communication plan

CIncident management requirements

DBusiness impact analysis (BIA)

Show Answer

Question: 5

Which of the following is MOST appropriate to include in an information security policy?

AStatements of management's intent to support the goals of information security

BA set of information security controls to maintain regulatory compliance

CA definition of minimum level of security that each system must meet

DThe strategy for achieving security program outcomes desired by management

Show Answer

Isaca CISM Quiz:258 Topic:1 Questions:1286-1290