Isaca CISM Quiz 104 Topic 3 Questions 516-520

Question: 1

The MOST important factors in determining the scope and timing for testing a business continuity plan are:

Athe experience level of personnel and the function location.

Bprior testing results and the degree of detail of the business continuity plan

Cthe importance of the function to be tested and the cost of testing,

Dmanual processing capabilities and the test location

Show Answer

Question: 2

Which of the following activities BEST enables executive management to ensure value delivery within an information security program?

ARequiring employees to undergo information security awareness training

BAssigning an information security manager to a senior management position

CApproving an industry-recognized information security framework

DReviewing business cases for information security initiatives

Show Answer

Question: 3

When using a newly implemented security information and event management (SIEM) infrastructure, which of the following should be considered FIRST?

AEncryption

BRetention

CReport distribution

DTuning

Show Answer

Question: 4

Which of the following processes would BEST help to ensure that information security risks will be evaluated when implementing a new payroll system?

AChange management

BProblem management

CConfiguration management

DIncident management

Show Answer

Question: 5

Which of the following is the BEST way to improve the timely reporting of information security incidents?

APerform periodic simulations with the incident response team.

BRegularly reassess and update the incident response plan.

CIntegrate an intrusion detection system (IDS) in the DMZ

DIncorporate security procedures in help desk processes

Show Answer

Isaca CISM Quiz:104 Topic:3 Questions:516-520