Isaca CISM Quiz 253 Topic 7 Questions 1261-1265

Question: 1

A newly appointed Information security manager finds mere is minimal interaction between departments in identifying ...risk due to the organization's current decentralized structure What is the managers BEST course of action?

AModify the current practices within the governance framework.

Bidentify appropriate risk management training for relevant staff in the departments

CPropose the creation of a consolidated organizational risk register to track risk

DRecommend consolidating all risk management activities under a central authority.

Show Answer

Question: 2

Which is MOST important when contracting an external party to perform a penetration test?

ADefine the project scope

BIncrease the frequency of log reviews.

CProvide network documentation.

DObtain approval from IT management.

Show Answer

Question: 3

An organization is considering moving lo a cloud service provider for the storage of sensitive data Which of the following .... consideration FIRST?

AResults of the cloud provider's control report

BA destruction-of-data clause m the contract

CRight to terminate clauses In the contract

DRequirements for data encryption

Show Answer

Question: 4

Which of the following provides the GREATEST assurance that information security is addressed in change management?

APerforming a security audit on changes

BRequiring senior management sign-off on change management

CReviewing changes from a security perspective

DProviding security training for change advisory board

Show Answer

Question: 5

The BEST way of establish a security baseline is by documenting

Aa standard of acceptable settings

Ba framework of operational standards

Cthe desired range of security settings

Dthe organization's preferred security level.

Show Answer

Isaca CISM Quiz:253 Topic:7 Questions:1261-1265