ISACA CISMリアル試験問題保証付き更新された問題集 [Q399-Q423]

質問 399
Which of the following processes can be used to remediate identified technical vulnerabilities?

質問 400
Which of the following will BEST enable the identification of appropriate controls to prevent repeated occurrences of similar types of information………..

質問 401
A review of a number of recent XT system rollouts identified a failure to incorporate security within planning, development and implementation. Which of the following is the MOST effective way to prevent a recurrence for future systems?

質問 402
The PRIMARY benefit of integrating information security activities into change management processes is to:

質問 403
Which of the following is the MOST relevant metric to include in an information security quarterly report to the executive committee?

質問 404
The PRIMARY concern of an information security manager documenting a formal data retention policy would be:

質問 405
A global organization has developed a strategy to share a customer information database between offices in two countries. In this situation, it is

質問 406
Which of the following is the BEST way to evaluate the impact of threat events on an organization’s IT operations?

質問 407
An organization needs to comply with new security incident response requirements. Which of the following should the information security manager do FIRST?

質問 408
Which type of test is MOST effective in communicating the roles of end users to support timely identification and response to information security incidents?

質問 409
The effectiveness of the information security process is reduced when an outsourcing organization:

質問 410
The security responsibility of data custodians in an organization will include:

質問 411
Which of the following is MOST important in determining whether a disaster recovery test is successful?

質問 412
Which of the following is the PRIMARY objective of an incident communication plan?

質問 413
Which of the following is the PRIMARY advantage of desk checking a business continuity plan (BCP)?

質問 414
The PRIMARY reason for defining the information security roles and responsibilities of staff throughout an organization is to:

質問 415
Which of the following is MOST effective in preventing the introduction of vulnerabilities that may disrupt the availability of a critical business application?

質問 416
A newly appointed Information security manager finds mere is minimal interaction between departments in identifying …risk due to the organization’s current decentralized structure What is the managers BEST course of action?

質問 417
The implementation of a capacity plan would prevent:

質問 418
Risk management programs are designed to reduce risk to:

質問 419
The PRIMARY objective of performing a post-incident review is to:

質問 420
After a risk assessment study, a bank with global operations decided to continue doing business in certain regions of the world where identity theft is rampant. The information security manager should encourage the business to:

質問 421
Which of the following is the MOST important consideration when securing customer credit card data acquired by a point-of-sale (POS) cash register?

質問 422
An employee has just reported the loss of a personal mobile device containing corporate information. Which of the following should the information security manager do FIRST?

質問 423
Which of the following is the BEST defense against a brute force attack?