Isaca CISM Quiz 167 Topic 6 Questions 831-835

Question: 1

The BEST way to determine the current state of information security with regard to defined security objectives is by performing a:

Acost-benefit analysis.

Bbusiness impact analysis (BIA).

Cgap analysis.

Drisk assessment.

Show Answer

Question: 2

The PRIMARY role of an information security steering group is to ensure that:

Asecurity procedures and practices are in line with formal policies.

Bthere is compliance with software-copyright legislation.

Cthere is compliance with security standards.

Dsecurity policies address business issues.

Show Answer

Question: 3

During a new user provisioning process, who should have PRIMARY responsibility for determining appropriate access levels?

AIT service manager

BSystem owner

CSecurity staff

DHuman resources manager

Show Answer

Question: 4

Who is MOST important to include when establishing the response process for a significant security breach that would impact the IT infrastructure and cause customer data toss?

AAn independent auditor for identification of control deficiencies

BA penetration tester to validate the attack

CA forensics expert for evidence management

DA damage assessment expert for calculating losses

Show Answer

Question: 5

Which is the MOST important driver for effectively communicating the progress of a new information security program's implementation to key stakeholders?

Afacilitating stakeholder undemanding of program-related technology concepts

BDesigning universal key performance indicators (KPIs) for the program

CUnderstanding stakeholder needs that influence program objectives

DDocumenting risk that could impact achievement of program objectives

Show Answer

Isaca CISM Quiz:167 Topic:6 Questions:831-835