Isaca CISM Quiz 18 Topic 2 Questions 86-90

Question: 1

Management has announced the acquisition of a new company. The information security manager of the parent company is concerned that conflicting access rights may cause critical information to be exposed during the integration of the two companies. To BEST address this concern, the information security manager should:

Aimplement consistent access control standards.

Bescalate concerns for conflicting access rights to management.

Cperform a risk assessment of the access rights.

Dreview access rights as the acquisition integration occurs.

Show Answer

Question: 2

An information security manager MUST have an understanding of the organization's business goals to:

Adefine key performance indicators (KPIs).

Bdevelop an information security strategy.

Cdevelop operational procedures.

Drelate information security to change management.

Show Answer

Question: 3

Which of the following is the BEST defense against a brute force attack?

ATime-of-day restrictions

BIntruder detection lockout

CMandatory access control

DDiscretionary access control

Show Answer

Question: 4

A n employee has just reported the loss of a personal mobile device containing corporate information. Which of the following should the information security manager do FIRST?

AInitiate a device reset.

BInitiate incident response.

CDisable remote access.

DConduct a risk assessment.

Show Answer

Question: 5

To inform a risk treatment decision, which of the following should the information security manager compare with the organization's risk appetite?

ALevel of residual risk

BConfiguration parameters

CGap analysis results

DLevel of risk treatment

Show Answer

Isaca CISM Quiz:18 Topic:2 Questions:86-90