Which of the following BEST protects against web-based cross-domain attacks?
Answer(s): B
Which of the following would be MOST effective in preventing malware from being launched through an email attachment?
Answer(s): C
Which of the following risks would BEST be assessed using quantitative risk assessment techniques?
The effect of the theft of customer data or web site defacement by hackers could lead to a permanent decline in customer confidence, which does not lend itself to measurement by quantitative techniques. Loss of a majority of the software development team could have similar unpredictable repercussions. However, the loss of electrical power for a short duration is more easily measurable and can be quantified into monetary amounts that can be assessed with quantitative techniques.
The impact of losing frame relay network connectivity for 18-24 hours should be calculated using the:
Answer(s): D
The bottom line on calculating the impact of a loss is what its cost will be to the organization. The other choices are all factors that contribute to the overall monetary impact.
Which of the following is the MOST usable deliverable of an information security risk analysis?
Although all of these are important, the list of action items is used to reduce or transfer the current level of risk. The other options materially contribute to the way the actions are implemented.
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.