Isaca CISM Quiz 316 Topic 3 Questions 1576-1580

Question: 1

The BEST way 10 establish a security baseline is by documenting

Aa standard of acceptable settings

Ba framework of operational standards

Cthe desired range of security settings

Dthe organization's preferred security level.

Show Answer

Question: 2

An information security manager has determined that the mean time to prioritize information security incidents has increased to an unacceptable level. Which of the following processes would BEST enable the information security manager to address this concern?

A. Forensic analysis B. Incident response

CIncident classification

DVulnerability assessment

Show Answer

Question: 3

2The business advantage of implementing authentication tokens is that they:

Areduce overall cost.

Bimprove access security.

Cprovide nonrepudiation.

Dreduce administrative workload.

Show Answer

Question: 4

An organization which uses external cloud services extensively is concerned with risk monitoring and timely response. The BEST way to

address this concern is to ensure:

Aa fight-to-audit clause is included in contracts.

Bthe availability of continuous technical support.

Cinternal security standards are in place.

Dappropriate service level agreements (SLAs) are in place.

Show Answer

Question: 5

Which of the following is the BEST indication that the information secunty strategy is delivering business value?

AStakeholders regularly seek feedback from the information security team

BKey risk indicators (KRIs) are regularly reviewed.

CThe information security team analyzes results from end user surveys.

DThere has been a significant reduction in the number of reported incidents.

Show Answer

Isaca CISM Quiz:316 Topic:3 Questions:1576-1580