Isaca Exam CGEIT Topic 5 Question 72 Discussion

Actual exam question for Isaca's CGEIT exam

Question #: 72
Topic #: 5

The CIO of an enterprise learns the payroll server of a competitor has been the victim of ransomware. To help plan for the possibility of ransomed corporate data, what should be the ClO's FIRST course of action?

ARequire development of key risk indicators (KRls).

BDevelop a policy to address ransomware.

CRequest a targeted risk assessment.

DBack up corporate data to a secure location.

Show Suggested Answer

Suggested Answer: A

by Giovanna at Apr 25, 2024, 07:16 AM

Limited Time Offer

25%

Off

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mike

1 months ago

The CIO should probably hire a ransomware negotiator - someone who's really good at holding their data for ransom.

upvoted 0 times

...

Rutha

2 months ago

Wow, ransomware is no joke. I bet the CIO is feeling the pressure right now. D seems like the safest bet, but I'm curious to see if anyone comes up with a witty pun about backing up data. That would really seal the deal for me.

upvoted 0 times

Victor

5 days ago

C) Request a targeted risk assessment.

upvoted 0 times

...

Carey

9 days ago

B) Develop a policy to address ransomware.

upvoted 0 times

...

Jeannetta

15 days ago

A) Require development of key risk indicators (KRIs).

upvoted 0 times

...

Mariko

2 months ago

Hold up, what about C? A targeted risk assessment could help the CIO identify vulnerabilities and plan accordingly. Might be worth considering, especially since the competitor's server was hit.

upvoted 0 times

Jose

6 days ago

C) Request a targeted risk assessment.

upvoted 0 times

...

Yvonne

18 days ago

B) Develop a policy to address ransomware.

upvoted 0 times

...

Casie

1 months ago

A) Require development of key risk indicators (KRIs).

upvoted 0 times

...

Kiera

2 months ago

I agree, D is the way to go. Backing up data is the first line of defense against ransomware. The other options are good too, but they won't do much if the data is already encrypted.

upvoted 0 times

...