Isaca CISM Quiz 319 Topic 3 Questions 1591-1595

Question: 1

Which of the following should be an information security manager's PRIMARY tole when an organization initiates a data classification process?

AAssign the asset classification level.

BApply security in accordance with specific classification.

CVerify that assets have been appropriately classified.

DDefine the classification structure to be implemented.

Show Answer

Question: 2

The MOST effective way to communicate the level of impact of information security risks on organizational objectives is to present

Adetailed threat analysis results.

Bbusiness impact analysis (BIA) results.

Crisk treatment options.

Da risk heat map.

Show Answer

Question: 3

An organization's IT department is undertaking a large virtualization project to reduce its physical server footprint. Which of the following should be the HIGHEST priority of the information

ASelecting the virtualization software

BDetermining how incidents will be managed

CBeing involved at the design stage of the project

DEnsuring the project has appropriate security funding

Show Answer

Question: 4

An organization is leveraging tablets to replace desktop computers shared by shift-basd staff. These tables contain critical business data and are inherently at increased risk of the ..

AConduct a mobile device risk assessment.

BCreate an acceptable use policy.

CDeploy mobile device management (MDM).

DImplement remote wipe capability.

Show Answer

Question: 5

Which of the following presents the GREATEST concern to the information security manager when using account locking features on an online application? It can increase vulnerability..

Asocial engineering.

Bphishing.

Cbrute force attacks.

Ddenial of service.

Show Answer

Isaca CISM Quiz:319 Topic:3 Questions:1591-1595