Isaca CISM Quiz 206 Topic 2 Questions 1026-1030

Question: 1

The BEST way to obtain funding from senior management for a security awareness program is to:

Ademonstrate that the program will adequately reduce risk

Bproduce an impact analysis report of potential breaches.

Cmeet regulatory requirements.

Dproduce a report of organizational risks.

Show Answer

Question: 2

Which of the following presents the GREATEST information security concern when deploying an identity and access management solution?

ASupporting legacy applications

BComplying with the human resource policy

CSupporting multiple user repositories

DGaining end user acceptance

Show Answer

Question: 3

Which of the following is the PRIMARY goal of an incident response team during a security incident?

AShut down the affected systems to limit the business impact.

BMinimize disruption to business-critical operations.

CEnsure the attackers are detected and stopped.

DMaintain a documented chain of evidence.

Show Answer

Question: 4

When recommending a preventive control against cross-site scripting in web applications, an information security manager is MOST likely to suggest:

Aconsolidating multiple sites into a single portal.

Bcoding standards and code review.

Cusing https in place of http.

Dhardening of the web server s operating system.

Show Answer

Question: 5

Which of the following is the MOST important consideration for designing an effective information security governance framework?

ASecurity controls automation

BDefined security metrics

CContinuous audit cycle

DSecurity policy provisions

Show Answer

Isaca CISM Quiz:206 Topic:2 Questions:1026-1030