Isaca CISM Quiz 36 Topic 2 Questions 176-180

Question: 1

Which of the following would provide the BEST evidence to senior management that security control performance has improved?

AResults of an emerging threat analysis

BReview of security metrics trends

CReduction in inherent risk

DDemonstrated return on security investment

Show Answer

Question: 2

An information security manager is asked to provide a short presentation on the organization's current IT risk posture to the board of directors. Which of the following would be MOST effective to include in this presentation?

AGap analysis results

BThreat assessment results

CRisk heat map

DRisk register

Show Answer

Question: 3

Which of the following is the MOST important security feature an information security manager would need for a mobile device management (MDM) program?

AAbility to inventory devices

BAbility to remotely wipe devices

CAbility to locate devices

DAbility to push updates to devices

Show Answer

Question: 4

Which of the following provides the MOST essential input for the development of an information security strategy?

AMeasurement of security performance against IT goals

BAvailability of capable information security resources

CResults of a technology risk assessment

DResults of an information security gap analysis

Show Answer

Question: 5

The effectiveness of an incident response team will be GREATEST when:

Athe incident response team meets on a regular basis to review log files.

Bthe incident response team members are trained security personnel

Cthe incident response process is updated based on lessons learned.

Dincidents are identified using a security information and event monitoring (SIEM) system.

Show Answer

Isaca CISM Quiz:36 Topic:2 Questions:176-180