Isaca CISM Quiz 317 Topic 4 Questions 1581-1585

Question: 1

A impacting its business operations. The organization does not yet have a proper incident response plan, but it does have a backup procedure for restoration of dat

a. Which of the following should be the FIRST course of action?

AIsolate the affected system.

BContact the legal department.

CRecommend that management pay the ransom.

DEstablish an incident response plan.

Show Answer

Question: 2

Which of the following would BEST fulfill a board of directors' request for a concise

ABusiness impact analysis

BRisk heat map

CBalanced scorecard

DRisk register

Show Answer

Question: 3

Which of the following BEST enables effective information security governance9

AEstablished information security metrics

BSecurity-aware corporate culture

CAdvanced security technologies

DPeriodic vulnerability assessments

Show Answer

Question: 4

Which of the following would be MOST helpful in gaming support for a business case for an Information security initiative9

AReferencing control deficiencies

BDemonstrating organizational alignment

CEmphasizing threats to the organization

DPresenting a solution comparison matrix

Show Answer

Question: 5

Which of the following should be of MOST concern to an information security manager reviewing an organization's data classification program*?

AThe classifications do not follow Industry best practices.

BData retention requirements are not defined.

CThe program allows exceptions to be granted.

DLabeling is not consistent throughout the organization

Show Answer

Isaca CISM Quiz:317 Topic:4 Questions:1581-1585