Isaca CISM Quiz 301 Topic 7 Questions 1501-1505

Question: 1

An IT department is evaluating a new cloud backup service to support the human resources (HR) department. Which of the following is the information security manager's MOST important action prior to contract execution?

AEnsure HR data is encrypted prior to sending it to the cloud vendor.

BReview the risk with HR executives.

CEvaluate the cloud vendor's information security program.

DComplete a compliance risk assessment.

Show Answer

Question: 2

Which of the following is the MAIN reason for integrating an organization's incident response plan with its business continuity process?

AIntegration of the plan will reduce resource costs to the organization.

BIncidents will be reported more timely when categorized as a disaster.

CRecovery time objectives (RTOs) need to be determined.

DIncidents can escalate into disasters needing proper response.

Show Answer

Question: 3

Information security policies should PRIMARILY reflect:

Aindustry best practices.

Bcompliance requirements,

Cdata security standards.

Dsenior management intent.

Show Answer

Question: 4

Which is MOST important to identify when developing an effective information security strategy?

ACompliance requirements

BControl gaps that require remediation

CPotential savings resulting from security governance

DBusiness assets to be secured

Show Answer

Question: 5

An email digital signature will:

Aprevent unauthorized modification of an email message.

Bprotect the confidentiality of an email message.

Cautomatically correct unauthorized modification of an email message.

Dverify to recipients the integrity of an email message.

Show Answer

Isaca CISM Quiz:301 Topic:7 Questions:1501-1505