Isaca CISM Quiz 35 Topic 3 Questions 171-175

Question: 1

An, organization's senior management is encouraging employees to use social media for promotional purposes. Which of the following should be the information security manager's FIRST step to support this strategy?

ADevelop a business case for a data loss prevention (DLP) solution.

BEmploy the use of a web content filtering solution.

CDevelop a guideline on the acceptable use of social media

DIncorporate social media into the security awareness program.

Show Answer

Question: 2

The PRIMARY goal of conducting a business impact analysis (BIA) as part of an overall continuity planning process is to:

Aobtain the support of executive management

Bdocument the disaster recovery process.

Cmap the business process to supporting IT and other corporate resources

Didentify critical processes and the degree of reliance on support
services.

Show Answer

Question: 3

Recovery time objectives (RTOs) are an output of which of the following?

ABusiness impact analysis (BIA)

BDisaster recovery plan (DRP)

CService level agreement (SLA)

DBusiness continuity plan (BCP)

Show Answer

Question: 4

An organization shares customer information across its globally dispersed branches. Which of the following should be the GREATEST concern to information security management?

ADecentralization of information security

BCross-cultural differences between branches

CConflicting data protection regulations

DInsecure wide area networks (WANS)

Show Answer

Question: 5

When drafting the corporate privacy statement for a public web site, which of the following MUST be included?

AInformation encryption requirements

BAccess control requirements

CLimited liability clause

DExplanation of information usage

Show Answer

Isaca CISM Quiz:35 Topic:3 Questions:171-175