Isaca CISM Quiz 62 Topic 2 Questions 306-310

Question: 1

Which of the following is the PRIMARY benefit of implementing a maturity model for information security management?

AStaff awareness of information security compliance will be promoted.

BInformation security strategy will be in line with industry best practice.

CGaps between current and desirable levels will be addressed.

DInformation security management costs will be optimized.

Show Answer

Question: 2

Which of the following should be the PRIMARY focus of a status report on the information security program to senior management?

ADemonstrating risk is managed at the desired level

BConfirming the organization complies with security policies

CProviding evidence that resources are performing as expected

DVerifying security costs do not exceed the budget

Show Answer

Question: 3

To address the issue that performance pressures on IT may conflict with information security controls, it is MOST important that:

Athe Steering committee provides guidance and dispute resolution.

Bnoncompliance issues are reported to senior management.

CIT policies and procedures are better aligned to security policies.

Dthe security policy is changed to accommodate IT performance pressure.

Show Answer

Question: 4

Which of the following would BEST help an organization's ability to manage advanced persistent threats (APT)?

AUsing multiple security vendors

BHaving a skilled information security team

CHaving network detection tools in place

DIncreasing the information security budget

Show Answer

Question: 5

An information security manager is implementing a bring your own device (BYOD) program. Which of the following would BES ensure that users adhere to the security standards?

APublish the standards on the intranet landing page.

BDeploy a device management solution.

CMonitor user activities on the network.

DEstablish an acceptable use policy.

Show Answer

Isaca CISM Quiz:62 Topic:2 Questions:306-310