Isaca CISM Quiz 311 Topic 5 Questions 1551-1555

Question: 1

A company is considering a new automated system that requires implementation of wireless devices for data capture. Even though

wireless is not an approved technology, senior management has accepted the risk and approved a Proof-of-Concept (POC) to evaluate

the technology and proposed solution. Which of the following is the information security manager's BEST course of action?

ADevelop corporate wireless standards.

BImplement a wireless intrusion detection system (IDS).

CProvide personnel with wireless security training.

DSandbox the proposed solution.

Show Answer

Question: 2

An information security manager should begin a business continuity planning (BCP) process by:

Adefining the recovery point objectives (RPOs).

BIdentifying alternative processing sites.

Cperforming a business impact analysis (BIA).

Ddefining the business objectives

Show Answer

Question: 3

Which of the following is the MOST significant contributor to the effectiveness of an incident response plan?

ADefined key performance indicators (KPIs)

BSufficient financial resources

CIncident response team experience

DRegular tabletop exercises

Show Answer

Question: 4

Which of the following is the MOST effective mechanism for communicating risk status and trends to senior management?

AThreat assessment

BKey risk indicators (KRIs)

CBusiness impact analysis (BIA}

DRisk assessment

Show Answer

Question: 5

Embedding security responsibilities into jab descriptions is important PRIMARILY because it

Asupports access management.

Bstrengthens employee accountability.

Caligns security to the human resources function.

Dsimplifies development of the security awareness program.

Show Answer

Isaca CISM Quiz:311 Topic:5 Questions:1551-1555