Isaca CISM Quiz 155 Topic 7 Questions 771-775

Question: 1

Which of the following is the BEST indication of an effective information security program?

AKey risk indicators (KRIs) are established.

BRisk is treated to an acceptable level.

CPolicies are approved by senior management.

DPolicies and standards are developed.

Show Answer

Question: 2

Which of the following is an information security manager's BEST course of action upon identification of a shadow IT application being used by a business unit?

APerform a vendor due diligence review.

BNotify senior management of the application.

CDetermine the nature of information within the application.

DReport the application to the IT department.

Show Answer

Question: 3

Which of the following is the GREATEST benefit of a comprehensive set of security program metrics?

AValidation of risk assessment results

BEvaluation of the security strategy

CData to support risk assessments

DVisibility to security compliance

Show Answer

Question: 4

Which of the following is the MOST important outcome of monitoring and reporting on information security processes?

AEnsuring information security operations support control objectives

BEnsuring information security operations are reviewed for effectiveness

CEnsiling information security operations follow approved procedures

DEnsuring information security operations meet service level agreements (SLA)

Show Answer

Question: 5

An organization has experienced a ransomware attack. Which of the following is the BEST course of action to prevent further attacks?

AImplement application blacklisting.

BRefuse to pay the ransom.

CUpdate the security policy.

DImplement application whitelisting.

Show Answer

Isaca CISM Quiz:155 Topic:7 Questions:771-775