ISACA-Certified Information Security Manager Set 18

1.

Recovery point objectives (RPOs) can be used to determine which of the following?

Maximum tolerable period of data loss Maximum tolerable downtime Baseline for operational resiliency Time to restore backups

2.

When electronically stored information is requested during a fraud investigation, which of the following should be the FIRST priority?

Assigning responsibility for acquiring the data Locating the data and preserving the integrity of the data Creating a forensically sound image Issuing a litigation hold to all affected parties

3.

When creating a forensic image of a hard drive, which of the following should be the FIRST step?

Identify a recognized forensics software tool to create the image. Establish a chain of custody log. Connect the hard drive to a write blocker. Generate a cryptographic hash of the hard drive contents.

4.

Which of the following is the initial step in creating a firewall policy?

A cost-benefit analysis of methods for securing the applications Identification of network applications to be externally accessed Identification of vulnerabilities associated with network applications to be externally accessed Creation of an applications traffic matrix showing protection methods

5.

When developing a security architecture, which of the following steps should be executed FIRST?

Developing security procedures Defining a security policy Specifying an access control methodology Defining roles and responsibilities

6.

An organization provides information to its supply chain partners and customers through an extranet infrastructure. Which of the following should be the GREATEST concern to an IS auditor reviewing the firewall security architecture?

A Secure Sockets Layer (SSL) has been implemented for user authentication and remote administration of the firewall. Firewall policies are updated on the basis of changing requirements. inbound traffic is blocked unless the traffic type and connections have been specifically permitted. The firewall is placed on top of the commercial operating system with all installation options.

7.

Which of the following is MOST critical for the successful implementation and maintenance of a security policy?

Assimilation of the framework and intent of a written security policy by all appropriate parties Management support and approval for the implementation and maintenance of a security policy Enforcement of security rules by providing punitive actions for any violation of security rules Stringent implementation, monitoring and enforcing of rules by the security officer through access control software

8.

Which of the following reduces the potential impact of social engineering attacks?

Compliance with regulatory requirements Promoting ethical understanding Security awareness programs Effective performance incentives

9.

Which of the following activities performed by a database administrator (DBA) should be performed by a different person?

Deleting database activity logs Implementing database optimization tools Monitoring database usage Defining backup and recovery procedures

10.

When segregation of duties concerns exists between IT support staff and end users, what would be a suitable compensating control?

Restricting physical access to computing equipment Reviewing transaction and application logs Performing background checks prior to hiring IT staff Locking user sessions after a specified period of inactivity

ISACA-Certified Information Security Manager Set 18

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

ISACA-Certified Information Security Manager Set 18

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner