Isaca CISM Quiz 214 Topic 5 Questions 1066-1070

Question: 1

When conducting a post-incident review, the GREATEST benefit of collecting mean time to resolution (MTTR) data is the ability to:

Averify compliance with the service level agreement (SLA).

Breduce the costs of future preventive controls.

Cprovide metrics for reporting to senior management

Dlearn of potential areas of improvement.

Show Answer

Question: 2

Which of the following is the MOST reliable source of information about emerging information security threats and vulnerabilities?

AA social media group of hackers

BIndustry bloggers

CVulnerability scanning alerts

DThreat intelligence groups

Show Answer

Question: 3

The MAIN consideration when designing an incident escalation plan should be ensuring that:

Arequirements cover forensic analysis.

Binformation assets are classified.

Cappropriate stakeholders are involved,

Dhigh-impact risks have been identified.

Show Answer

Question: 4

What should be an information security manager's FIRST course of action when an organization is subject to a new regulatory requirement?

ASubmit a business case to support compliance.

BPerform a gap analysis,

CComplete a control assessment.

DUpdate the risk register.

Show Answer

Question: 5

Which of the following is the PRIMARY reason to avoid alerting certain users of an upcoming penetration test?

ATo aid in the success of the penetration

BTo reduce the scope and duration of the test

CTo prevent exploitation by malicious parties

DTo evaluate detection and response capabilities

Show Answer

Isaca CISM Quiz:214 Topic:5 Questions:1066-1070