Isaca CISM Quiz 285 Topic 5 Questions 1421-1425

Question: 1

What should be the FIRST step when developing an asset management program?

ACreate a configuration management database

BEncrypt assets containing sensitive data.

CClassify assets according to risk.

DCreate an asset inventory.

Show Answer

Question: 2

Which is MOST important when aligning security priorities with business unit strategies?

ARisk mitigation plans

BStakeholder feedback

CGap analysis

DBusiness impact analysis (BIA)

Show Answer

Question: 3

Which of the following is MOST important to include in contracts with key third-party providers?

ARight-to-audit clauses

BFinancial penalties for breaches

CRight-to-terminate clauses

DProvisions to protect sensitive data

Show Answer

Question: 4

Which of the following should be done FIRST when establishing security measures for personal data stored and processed on a human resources....system?

AEvaluate data encryption technologies.

BConduct a vulnerability assessment.

CMove the system into a separate network.

DConduct a privacy impact assessment (PIA).

Show Answer

Question: 5

An organization is considering moving to a cloud service provider for the storage of sensitive dat

a. Which of the following should be considered FIRST?

ARequirements for data encryption

BResults of the cloud provider's control report

CA destruction-of-data clause in the contract

DRight to terminate clauses in the contract

Show Answer

Isaca CISM Quiz:285 Topic:5 Questions:1421-1425