When preparing a risk treatment plan, which of the following is the MOST important consideration when reviewing options for mitigating risk?
Answer(s): A
Which of the following would BEST enable an information security manager to identify the risk associated with cloud-based solutions?
Answer(s): C
When selecting metrics to monitor the risks associated with an information security program, it is MOSTimportant for an information security manager to:
Answer(s): B
The MAIN reason for deploying a public key infrastructure (PKI) when implementing an information security program is to:
The primary purpose of a public key infrastructure (PKI) is to provide strong authentication. Confidentiality is a function of the session keys distributed by the PKI. An active directory can use PKI for authentication as well as using other means. Even though secure sockets layer (SSL) encryption requires keys to authenticate, it is not the main reason for deploying PKI.
An organization’s senior management is encouraging employees to use social media for promotional purposes. Which of the following should be the information security manager’s FIRST step to support this strategy?
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.