Isaca CISM Quiz 179 Topic 4 Questions 891-895

Question: 1

An information security manager has been asked to identify potential threats to the organization's information. Which of the following should be done FIRST'

ADevelop a risk profile.

BEngage a third-parry consultant

CSelect a governance framework.

DReview cyber insurance coverage.

Show Answer

Question: 2

An organization has a policy in which all criminal activity is prosecuted. What is MOST important for the information security manager to ensure when an employee is suspected of using a company computer to commit fraud?

AThe forensics process is immediately initiated.

BThe employee's log Ales are backed up.

CThe Incident response plan is initiated.

DSenior management is informed of the situation.

Show Answer

Question: 3

Which of the following is the PRIMARY purpose of data classification?

ATo select encryption technology

BTo determine access rights to data

CTo ensure integrity of data

DTo provide a basis for protecting data

Show Answer

Question: 4

Which of the following should be the PRIMARY consideration for an information security manager when designing security center for a newly acquired business application?

AThe IT security architecture framework

BKnown vulnerabilities in the application

CBusiness processes supported by the application

DCost-benefit analysis of current controls

Show Answer

Question: 5

Information security governance is PRIMARILY a:

Aregulatory issue.

Bpeople issue.

Cbusiness issue.

Dprocess issue.

Show Answer

Isaca CISM Quiz:179 Topic:4 Questions:891-895