Isaca CISM Quiz 209 Topic 6 Questions 1041-1045

Question: 1

An organization recently rolled out a new procurement program that does not include any security requirements. Which of the following should the information security manager do FIRST?

AEscalate the procurement program gaps to the compliance department in case of noncompliance issues.

BAsk internal audit to conduct an assessment of the current state of third-party security controls.

CConduct security assessments of vendors based on value of annual spend with each vendor.

DMeet with the head of procurement to discuss aligning security with the organization's operational objectives.

Show Answer

Question: 2

Which of the following is MOST important to building an effective information security program?

Alogical access controls for information systems

BInformation security architecture to increase monitoring activities

CRelevant and timely content included in awareness programs

DManagement support for information security

Show Answer

Question: 3

The PRIMARY reason for classifying assets is to:

Abalance asset value and protection measures.

Binform senior management of the organization's risk posture.

Cidentify low-value assets with insufficient controls.

Destablish clear lines of authority and ownership for the asset

Show Answer

Question: 4

When implementing a new risk assessment methodology, which of the following is the MOST important requirement?

ARisk assessments must be reviewed annually.

BRisk assessments must be conducted by certified staff.

CThe methodology used must be consistent across the organization.

DThe methodology must be approved by the chief executive officer.

Show Answer

Question: 5

What should the information security manager recommend to support the development of a new web application that will allow retail customers to view inventory and order products?

ABuilding an access control matrix

BImplementation of secure transmission protocols

CAccess through a virtual private network (VPN)

DRequest customers adhere to baseline security standards

Show Answer

Isaca CISM Quiz:209 Topic:6 Questions:1041-1045