Isaca CISM Quiz 260 Topic 5 Questions 1296-1300

Question: 1

A core business function has created a significant risk. Budget constraints do not allow for effective remediation. Who should be accountable for selecting the appropriate risk treatment?

ABusiness process owner

BSecurity officer

CAudit team

DSenior management

Show Answer

Question: 2

Which of the following will BEST ensure that possible security incidents are correctly distinguished from typical help desk requests?

AReviewing the help desk log

BPeriodic training of help desk personnel

CUpdating the help desk manual

DEstablishing a security incident hotline

Show Answer

Question: 3

Which of the following should be an information security manager's PRIMARY consideration when developing an incident response plan?

AThe organization's risk tolerance and appetite

BThe organization's external communications plan

CSkills and competencies of the help desk

DIncident response plan testing methods and frequency

Show Answer

Question: 4

Which of the following will provide the MOST accurate test results for a disaster recovery plan (DRP)?

AFull interruption test

BStructured walk-through

CParallel test

DSimulation test

Show Answer

Question: 5

Which of the following is MOST important when carrying out a forensic examination of a laptop to determine an employee s involvement in a fraud?

AThe investigation should be conducted on an image of the original disk drive.

BThe laptop should not be removed from the company premises.

CThe employee's network access should be suspended.

DAn HR representative should be present during the laptop examination.

Show Answer

Isaca CISM Quiz:260 Topic:5 Questions:1296-1300