Isaca CISM Quiz 324 Topic 4 Questions 1616-1620

Question: 1

Which of the following methods is the BEST way to demonstrate that an information security program provides appropriate coverage?

ASecurity risk analysis

BGap assessment

CMaturity assessment

DVulnerability scan report

Show Answer

Question: 2

Which of the following is MOST effective in reducing the financial impact following a security breach leading to data disclosure9?

AAn incident response plan

BBackup and recovery strategy

CA data loss prevention (DLP) solution

DA business continuity plan (BCP)

Show Answer

Question: 3

Which of the following BEST enables effective information security governance9?

AEstablished information security metrics

BSecurity-aware corporate culture

CAdvanced security technologies

DPeriodic vulnerability assessments

Show Answer

Question: 4

An information security manager has recently been notified of potential security risks associated with a thirdparty service provider. What should be done NEXT to address this concern?

AConduct a risk analysis

BConduct a vulnerability analysis

CEscalate to the chief risk officer

DDetermine compensating controls

Show Answer

Question: 5

Which of the following is MOST important to emphasize when presenting cyber attack information to gain Senior management support for

control enhancements?

ARecent cyber attacks in the same industry sector

BControl gaps within defense-in-depth architecture

CImpacts to the business

DThreats against internal systems

Show Answer

Isaca CISM Quiz:324 Topic:4 Questions:1616-1620