Isaca CISM Quiz 145 Topic 7 Questions 721-725

Question: 1

Which of the following is the MOST important characteristic of an effective security policy?

AThe policy has been validated by business owners.

BThe policy includes actionable procedures.

CThe policy provides broad organizational direction.

DThe policy is aligned to industry best practice.

Show Answer

Question: 2

When developing an information security governance framework, which of the following should be the FIRST activity?

AAlign the information security program with the organization's other risk and control activities.

BDevelop policies and procedures to support the framework.

CDevelop response measures to detect and ensure the closure of security breaches.

DIntegrate security within the system's devetoojtam life cycle process.

Show Answer

Question: 3

As the security program matures, which of the following reports presented to senior management provides the MOST insight on the importance of the security program7

AThe status of approved security projects against budget

BThe causes and impacts of security-related incidents

CThe contribution of security investments to business growth

DThe maturity of the security program

Show Answer

Question: 4

What is the BEST way to manage access to data and applications for large user bases?

AMandatory access control

BAccess control lists

CDiscretionary access control

DRole-based access control

Show Answer

Question: 5

Which of the following is the GREATEST security threat when an organization allows remote access through a virtual private network (VPN)?

AClient logins are subject to replay attack.

BVPN traffic could be sniffed and captured.

CCompromised VPN clients could impact the network.

DAttackers could compromise the VPN gateway.

Show Answer

Isaca CISM Quiz:145 Topic:7 Questions:721-725