Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CISM Exam - Topic 5 Question 56 Discussion

An information security manager believes that information has been classified inappropriately, = the risk of a breach. Which of the following is the information security manager's BEST action?
D) Complete a risk assessment and refer the results to the data owners.
A) Refer the issue to internal audit for a recommendation.
B) Re-classify the data and increase the security level to meet business risk.
C) Instruct the relevant system owners to reclassify the data.

Isaca CISM Exam - Topic 5 Question 56 Discussion

Actual exam question for Isaca's CISM exam
Question #: 56
Topic #: 5
[All CISM Questions]

An information security manager believes that information has been classified inappropriately, = the risk of a breach. Which of the following is the information security manager's BEST action?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Gail at Jan 05, 2023, 10:04 PM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Tesha
8 months ago
Wait, can you just re-classify data like that? Seems risky!
upvoted 0 times
...
Remedios
8 months ago
C could work, but are the system owners really qualified?
upvoted 0 times
...
Lura
9 months ago
D sounds like a thorough approach, but it takes time.
upvoted 0 times
...
Francis
9 months ago
Not sure about that, A might be safer.
upvoted 0 times
...
Carin
9 months ago
I think B is the best choice. Re-classifying is crucial!
upvoted 0 times
...
Marion
9 months ago
Instructing system owners to reclassify seems risky; they might not have the full context. I feel like I’ve seen this scenario in practice exams before.
upvoted 0 times
...
Alease
9 months ago
I lean towards completing a risk assessment before taking any action. It seems like the most thorough approach, but I’m not entirely confident.
upvoted 0 times
...
Margot
9 months ago
I think re-classifying the data directly might be too hasty without a proper assessment first. I feel like we practiced a question similar to this.
upvoted 0 times
...
My
9 months ago
I remember discussing the importance of data classification in our last class, but I'm not sure if referring to internal audit is the best first step.
upvoted 0 times
...
Theresia
9 months ago
Hmm, I'm a bit confused on how to properly configure the mirroring and cache. Should the disks be mirrored and the flash devices used as cache, or is there a different way to set that up?
upvoted 0 times
...
Ronald
10 months ago
This looks pretty straightforward. I think I can handle this by following the steps in the explanation.
upvoted 0 times
...

Save Cancel