Isaca CISM Quiz 277 Topic 6 Questions 1381-1385

Question: 1

For an organization that encourages sales activities using mobile devices, which of the following should be the MOST important security requirement?

AUser operation logging

BRemote wipe capabilities

CPassword logic enhancement

DPeriodic device monitoring

Show Answer

Question: 2

Which of the following BEST demonstrates the effectiveness of the vulnerability management process?

AAverage time from patch release to catch installation

BPerformance of periodic internal vulnerability scans

CResource allocation for remediating vulnerabilities

DResults of third-party penetration testing

Show Answer

Question: 3

An organization is automating data protection by implementing a data loss prevention (DLP) solution. Which of the following should the Information security manager do FIRST?

APerform a cost-benefit analysis.

BDefine the threshold for reporting data loss

CDefine a data classification schema

DEvaluate potential DLP solutions.

Show Answer

Question: 4

Which of the following is the BEST way to ensure that Incidents are Identified and reported?

ADevelop and communicate a comprehensive incident response plan.

BPublish a punitive action policy for failure to report Incidents.

CImplement an ongoing incident response training program for employees.

DImplement an automated monitoring program to detect incidents.

Show Answer

Question: 5

Which of the following metrics is the MOST appropriate for measuring how well information security is performing in dealing with outside attacks?

ANumber of incident detected.

BNumber of emergencies declared

CElapsed time to resolve incidents

DElapsed time to declare emergencies.

Show Answer

Isaca CISM Quiz:277 Topic:6 Questions:1381-1385