Isaca CISM Quiz 156 Topic 5 Questions 776-780

Question: 1

A recent phishing attack investigation showed that several employees had used their work email addresses to create personal accounts on a shopping site that had been breached. What is the BEST way to prevent this

AUpdate the incident response plan to address this situation.

BSend periodic fake phishing emails to employees and track responses.

CConduct information security awareness training for employees.

DBlock personal shopping sites using proxy filtering.

Show Answer

Question: 2

Which of the ager to regularly report to senior management?

AResults of penetration tests

BImpact of untreated risks

CThreat analysis reports

DAudit reports

Show Answer

Question: 3

Which of the following is the BEST evidence that information security governance works as a business enabler?

ABusiness initiatives are within risk tolerance.

BSecurity key performance indicators (KPIs) are included in management briefings.

CBusiness initiatives are prioritized over security initiatives.

DSecurity initiatives have positive return on investment (ROI).

Show Answer

Question: 4

Which of the following is MOST important for an information security manager to include in a report to senior management following a post-incident review?

ALessons learned

BSnapshot of system logs

CThe incident response plan

DDetailed metrics

Show Answer

Question: 5

The PRIMARY purpose of a risk assessment is to enable business leaders to:

Amake informed decisions.

Bdefine key risk indicators (KRIs).

Cmanage information security expenditures.

Dalign information security to business objectives.

Show Answer

Isaca CISM Quiz:156 Topic:5 Questions:776-780