Isaca CISM Quiz 322 Topic 3 Questions 1606-1610

Question: 1

Which of the following is the MOST effective mechanism for communicating risk status and trends to senior management'?

AThreat assessment

BKey risk indicators (KRIs)

CBusiness impact analysis (BIA}

DRisk assessment

Show Answer

Question: 2

An information security manager is reviewing a contract with a third-party service provider. Which of the following issues should be of MOST concern?

AThe provider lacks compliance certification.

BPenalties for breach of contract are not defined.

CThe provider states the client is responsible for data classification.

DThere is no provision for a right to audit.

Show Answer

Question: 3

An information security team has identified traffic from a device to a known malicious IP Which of the following should be the team's FIRST course of action to address this issue?

ATurn off the device

BRun anti-malware software on the device

CRe-image the device

DDisconnect the device from the network.

Show Answer

Question: 4

When evaluating cloud storage solutions the FIRST consideration should be:

Aalignment with the organization's data classification policy

Bhow the organization's sensitive data will be transferred

Cwho controls the encryption keys

Dthe level of protection of data stored in the cloud.

Show Answer

Question: 5

A corporate laptop containing confidential data is compromised The incident has been contained and the laptop is in the possession of the incident response team The NEXT step should be to

Acreate a duplicate image

Binitiate system recovery

Cwipe the system

Ddispose of the laptop hard drive

Show Answer

Isaca CISM Quiz:322 Topic:3 Questions:1606-1610