Isaca CISM Quiz 256 Topic 6 Questions 1276-1280

Question: 1

Which of the following is the MOST appropriate party to approve an information security strategy?

AInformation security management committee

BChief information officer

CChief information security officer

DExecutive leadership team

Show Answer

Question: 2

Which of the following is the MAIN objective of classifying a security incident as soon as it is discovered?

APreserving relevant evidence

BEngaging appropriate resources

CEnabling appropriate incident investigation

DDowngrading the impact of the incident

Show Answer

Question: 3

Which of the following BEST demonstrates that the objectives of an information security governance framework are being met?

APenetration test results

BBalanced scorecard

CRisk dashboard

DKey performance indicators (KPIs)

Show Answer

Question: 4

Presenting which of the following to senior management will be MOST helpful in securing ongoing support for the information security strategy?

AHistorical security incidents

BCurrent vulnerability metrics

CReturn on security investment

DCompleted business impact analyses (BIAs)

Show Answer

Question: 5

Which of the following would BEST enable integration of information security governance into corporate governance?

AEnsuring appropriate business representation on the information security steering committee

BHaving the CIO chair the information security steering committee

CUsing a balanced scorecard to measure the performance of the information security strategy

DImplementing IT governance, risk and compliance (IT GRC) dashboards

Show Answer

Isaca CISM Quiz:256 Topic:6 Questions:1276-1280