カテゴリー ISACA

新しい質問 130
An organization with a strict need-to-know information access policy is about to launch a knowledge management intranet. Which of the following is the MOST important activity to ensure compliance with existing security policies?

新しい質問131
Which of the following is a potential indicator of inappropriate Internet use by staff?

新しい質問 132
When establishing metrics for an information security program, the BEST approach is to identify indicators that:

新しい質問 133
An organization’s CIO has tasked the information security manager with drafting the charter for an information security steering committee. The committee will be comprised of the CIO, the IT shared services manager, the vice president of marketing, and the information security manager.
Which of the following is the MOST significant issue with the development of this committee?

新しい質問 134
Which of the following is BEST used to determine the maturity of an information security program?

新しい質問 135
An intrusion detection system (IDS) should:

新しい質問 136
Which of the following BEST reduces the likelihood of leakage of private information via email?

新しい質問 137
Which of the following is the BEST way to ensure that organizational security policies comply with data security regulatory requirements?

新しい質問 138
Which of the following is the PRIMARY reason that an information security manager would contract with an external provider to perform penetration testing?

新しい質問 139
Recovery point objectives (RPOs) can be used to determine which of the following?

新しい質問 140
Which of the following is the BEST approach to incident response for an organization migrating to a cloud-based solution?

新しい質問 141
Which of the following is MOST important in increasing the effectiveness of incident responders?

新しい質問 142
When a proposed system change violates an existing security standard, the conflict would be BEST resolved by:

新しい質問143
When electronically stored information is requested during a fraud investigation, which of the following should be the FIRST priority?

新しい質問 144
A risk assessment exercise has identified the threat of a denial of service (DoS) attack. Executive management has decided to take no further action related to this risk. The MOST likely reason for this decision is:

新しい質問 145
A software vendor has announced a zero-day vulnerability that exposes an organization’s critical business systems, following should be the information security manager’s PRIMARY concern?

新しい質問 146
Which of the following service offerings in a typical Infrastructure as a Service (IaaS) model will BEST enable a cloud service provider to assist customers when recovering from a security incident?