Isaca CISM Quiz 178 Topic 6 Questions 886-890

Question: 1

An information security manager that is utilizing a public cloud is performing a root cause investigation of an incident that took place in that environment. Which of the following should be the security manager's MAIN concern?

ALimited access to information

BShared infrastructure with other subscribers

CTransaction records split into multiple cloud locations

DLack of security log filtering

Show Answer

Question: 2

A hacking group has posted an organization's employee data on social medi

a. What should the information security manager do FIRST?

AInitiate the incident response process.

BInform the impacted employees.

CNotify law enforcement.

DReview system audit logs.

Show Answer

Question: 3

When an operating system is being hardened, it is MOST important for an information security manager to ensure that

Asystem logs are activated.

Bdefault passwords are changed.

Canonymous access is removed.

Dfile access is restricted

Show Answer

Question: 4

Calculation of the recovery time objective (RTO) is necessary to determine the:

Aannual loss expectancy (ALE)

Bpriority of restoration.

Ctime required to restore files.

Dpoint of synchronization

Show Answer

Question: 5

Which of the following is the MOST effective way to achieve the integration of information security governance into corporate governance?

AEnsure information security aligns with IT strategy.

BEnsure information security efforts support business goals

CAlign information security budget requests to organizational goals.

DProvide periodic IT balanced scorecards to senior management.

Show Answer

Isaca CISM Quiz:178 Topic:6 Questions:886-890