Isaca CISM Quiz 192 Topic 6 Questions 956-960

Question: 1

An organization that has outsourced its incident management capabilities just discovered a significant privacy breach by an unknown attacker. Which of the following is the MOST important action of the information security manager?

AAlert the appropriate law enforcement authorities.

BNotify the outsourcer of the privacy breach.

CRefer to the organization's response plan.

DFollow the outsourcers response plan.

Show Answer

Question: 2

Which of the following BEST enables a more efficient incident reporting process?

ATraining executive management for communication with external entities

BEducating the incident response team on escalation procedures

CEducating IT teams on compliance requirements

DTraining end users to identify abnormal events

Show Answer

Question: 3

Mitigating technology risks to acceptable levels should be based PRIMARILY upon:

Ainformation security budget.

Blegal and regulatory requirements.

Cbusiness process reengineering.

Dbusiness process requirements.

Show Answer

Question: 4

The PRIMARY purpose of implementing information security governance metrics is to:

Ameasure alignment with best practices.

Bguide security towards the desired state.

Crefine control operations.

Dasses operational and program metrics

Show Answer

Question: 5

A large organization is considering a policy that would allow employees to briog their own smartphones into the organizational environment. The MOST important concern to the information security manager should be the:

Adecrease in end user productivity.

Bimpact on network capacity.

Clack of a device management solution.

Dhigher costs in supporting end users.

Show Answer

Isaca CISM Quiz:192 Topic:6 Questions:956-960