Isaca CISM Exam - Topic 5 Question 56 Discussion

Actual exam question for Isaca's CISM exam

Question #: 56
Topic #: 5

An information security manager believes that information has been classified inappropriately, = the risk of a breach. Which of the following is the information security manager's BEST action?

ARefer the issue to internal audit for a recommendation.

BRe-classify the data and increase the security level to meet business risk.

CInstruct the relevant system owners to reclassify the data.

DComplete a risk assessment and refer the results to the data owners.

Show Suggested Answer

Suggested Answer: D

by Gail at Jan 05, 2023, 10:04 PM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tesha

7 months ago

Wait, can you just re-classify data like that? Seems risky!

upvoted 0 times

...

Remedios

7 months ago

C could work, but are the system owners really qualified?

upvoted 0 times

...

Lura

7 months ago

D sounds like a thorough approach, but it takes time.

upvoted 0 times

...

Francis

7 months ago

Not sure about that, A might be safer.

upvoted 0 times

...

Carin

7 months ago

I think B is the best choice. Re-classifying is crucial!

upvoted 0 times

...

Marion

8 months ago

Instructing system owners to reclassify seems risky; they might not have the full context. I feel like I’ve seen this scenario in practice exams before.

upvoted 0 times

...

Alease

8 months ago

I lean towards completing a risk assessment before taking any action. It seems like the most thorough approach, but I’m not entirely confident.

upvoted 0 times

...

Margot

8 months ago

I think re-classifying the data directly might be too hasty without a proper assessment first. I feel like we practiced a question similar to this.

upvoted 0 times

...

My

8 months ago

I remember discussing the importance of data classification in our last class, but I'm not sure if referring to internal audit is the best first step.

upvoted 0 times

...

Theresia

8 months ago

Hmm, I'm a bit confused on how to properly configure the mirroring and cache. Should the disks be mirrored and the flash devices used as cache, or is there a different way to set that up?

upvoted 0 times

...

Ronald

8 months ago

This looks pretty straightforward. I think I can handle this by following the steps in the explanation.

upvoted 0 times

...