Isaca CISM Quiz 255 Topic 7 Questions 1271-1275

Question: 1

While auditing a data center's IT architecture, an information security manager discovers that required encryption for data communications has not been implemented. Which of the following should be done NEXT?

AEvaluate compensating and mitigating controls.

BDocument and report the findings.

CPerform a cost benefit analysis.

DPerform a business impact analysis (BIA).

Show Answer

Question: 2

Which of the following is MOST important to help ensure an intrusion prevention system (IPS) can view all traffic in a demilitarized zone (DMZ)?

AAll Internal traffic is routed to the IPS.

BConnected devices can contact the IPS.

CThe IPS is placed outside of the firewall.

DTraffic is decrypted before processing by the IPS.

Show Answer

Question: 3

In order to understand an organization's security posture, it is MOST important for an organizations senior leadership to:

Areview the number of reported security Incidents,

Bevaluate results of the most recent incident response test

Censure established security metrics are reported.

Dassess progress of risk mitigation efforts.

Show Answer

Question: 4

The BEST way to establish a security baseline is by documenting:

Aa standard of acceptable settings

Ba framework of operational standards

Cthe desired range of security settings

Dthe organization's preferred security level.

Show Answer

Question: 5

Which of the following is the BEST method to protect against data exposure when a mobile device is stolen?

APassword protection

BInsurance

CEncryption

DRemote wipe capability

Show Answer

Isaca CISM Quiz:255 Topic:7 Questions:1271-1275