CISM Final Assessment 4

A situation where an organization has unpatched IT systems in violation of the patching policy should be treated as:

How does data discovery assist with data classification?

Which of the following is the MOST effective control to prevent proliferation of shadow IT?

Which of the following is the MOST important driver when developing an effective information security strategy?

Which of the following is MOST important for the improvement of a business continuity plan (BCP)?

Which of the following is MOST important to consider when choosing a shared alternate location for computing facilities?

A financial institution has identified a high risk of fraud within its credit department. Which of the following information security controls will BEST reduce the risk of fraud?

An employee clicked on a malicious link in an email that resulted in compromising company data. What is the BEST way to mitigate this risk in the future?

The business value of an information asset is derived from:

Which of the following is the BEST indicator of the maturity level of a vendor risk management process?

An international organization with remote branches is implementing a corporate security policy for managing personally identifiable information (PII). Which of the following should be the information security manager’s MAIN concern?

Which of the following is the BEST reason for senior management to support a business case for developing a monitoring system for a critical application?

Which of the following is MOST important when developing an information security governance framework?

What should be an information security manager’s GREATEST concern when an HR department outsources data processing to a cloud service provider?

Which of the following BEST enables the capability of an organization to sustain the delivery of products and services within acceptable time frames and at predefined capacity during a disruption?

Which of the following BEST determines an information asset’s classification?

Which of the following is the PRIMARY objective of a cyber resilience strategy?

Which of the following is the MOST important reason for an organization to communicate to affected parties that a security incident has occurred?

Which of the following is the BEST indication that an information security control is no longer relevant?

Which of the following is the PRIMARY advantage of an organization using Disaster Recovery as a Service (DRaaS) to help manage its disaster recovery program?

Which of the following is the MOST important outcome of a post-incident review?

Which of the following is the BEST indicator of the performance of a security program?

An organization has remediated a security flaw in a system. Which of the following should be done NEXT?

Which of the following BEST facilitates the development of a comprehensive information security policy?

Which of the following is the MOST effective way to demonstrate improvement in security performance?

In order to gain organization-wide support for an information security program, which of the following is MOST important to consider?

Which of the following is the BEST way to ensure the business continuity plan (BCP) is current?

Which of the following would be MOST useful when determining the business continuity strategy for a large organization’s data center?

The results of a risk assessment for a potential network reconfiguration reveal a high likelihood of sensitive data being compromised. What is the information security manager’s BEST course of action?

Who should be included in INITIAL discussions regarding a failed security control?

An organization has implemented a new customer relationship management (CRM) system. Who should be responsible for enforcing authorized and controlled access to the CRM data?

Which of the following should an information security manager do FIRST upon learning of a new ransomware targeting a particular line of business?

Which of the following should be the PRIMARY objective when establishing a new information security program?

An organization implemented a number of technical and administrative controls to mitigate risk associated with ransomware. Which of the following is MOST important to present to senior management when reporting on the performance of this initiative?

Which of the following is the BEST defense against distributed denial of service (DDoS) attacks?

Which of the following scenarios would MOST likely require a change to corporate security policies?

While conducting a test of a business continuity plan (BCP), which of the following is the MOST important consideration?

When testing an incident response plan for recovery from a ransomware attack, which of the following is MOST important to verify?

Which of the following is the GREATEST benefit of incorporating information security governance into the corporate governance framework?

Which of the following should an information security manager do FIRST when a vulnerability has been disclosed?

When an organization experiences a disruptive event, the business continuity plan (BCP) should be triggered PRIMARILY based on:

Which of the following controls would BEST help to detect a targeted attack exploiting a zero-day vulnerability?

Which of the following is the MOST relevant control to address the integrity of information?

What should be the PRIMARY objective of an information classification scheme?

Which of the following is MOST important to consider when prioritizing threats during the risk assessment process?

Which of the following would BEST fulfill a board of directors’ request for a concise overview of information security risk facing the business?

Which of the following is the PRIMARY purpose of a business impact analysis (BIA)?

An organization wants to integrate information security into its HR management processes. Which of the following should be the FIRST step?

Following a breach where the risk has been isolated and forensic processes have been performed, which of the following should be done NEXT?

Which of the following is MOST important for effective cybersecurity incident management?

An organization uses a security standard that has undergone a major revision by the certifying authority. The old version of the standard will no longer be used for organizations wishing to maintain their certifications. Which of the following should be the FIRST course of action?

Which of the following is the MOST appropriate metric to demonstrate the effectiveness of information security controls to senior management?

Which of the following is the BEST indication that an organization has integrated information security governance with corporate governance?

The MOST effective way to present information security risk to senior management is to highlight:

Within the confidentiality, integrity, and availability (CIA) triad, which of the following activities BEST supports the concept of confidentiality?

Which of the following should be the PRIMARY objective for creating a culture of security within an organization?

Which of the following should be updated FIRST when aligning the incident response plan with the corporate strategy?

Which of the following is the MOST effective way to ensure the security of services and solutions delivered by third-party vendors?

Which of the following eradication methods is MOST appropriate when responding to an incident resulting in malware on an application server?

Which of the following is MOST important for guiding the development and management of a comprehensive information security program?

Which of the following is the BEST way to ensure data is not co-mingled or exposed when using a cloud service provider?

Before approving the implementation of a new security solution, senior management requires a business case. Which of the following would BEST support the justification for investment?

When an organization implements an information security governance framework, it is MOST important for executive leadership to have a direct role in:

Which of the following should have the MOST influence on an organization’s response to a new industry regulation?

Biometrics are BEST used for:

Predetermined containment methods to be used in a cybersecurity incident response should be based PRIMARILY on the:

Communicating which of the following would be MOST helpful to gain senior management support for risk treatment options?

Which of the following is the PRIMARY objective of information asset classification?

Which of the following trends would be of GREATEST concern when reviewing the performance of an organization’s intrusion detection systems (IDSs)?

Management would like to understand the risk associated with engaging an Infrastructure-as-a-Service (IaaS) provider compared to hosting internally. Which of the following would provide the BEST method of comparing risk scenarios?

Which of the following is the PRIMARY reason to regularly update business continuity and disaster recovery documents?

Which of the following will have the GREATEST impact on the development of the information classification scheme consisting of various classification levels?

To prepare for a third-party forensics investigation following an incident involving malware, the incident response team should:

Of the following, who should own the risk associated with unauthorized access to application data?

The categorization of incidents is MOST important for evaluating which of the following?

An organization learns that a third party has outsourced critical functions to another external provider. Which of the following is the information security manager’s MOST important course of action?

An organization has acquired a new system with strict maintenance instructions and schedules. Where should this information be documented?

The PRIMARY benefit of using http secure (https) is that it provides:

An organization provides notebook PCs, cable wire locks, smartphone access, and virtual private network (VPN) access to its remote employees. Which of the following is MOST important for the information security manager to ensure?

To improve an organization’s information security culture, it is MOST important for senior management to:

Which of the following BEST illustrates residual risk within an organization?

Which of the following is the MOST effective way to determine the alignment of an information security program with the business strategy?

An organization experienced a loss of revenue during a recent disaster. Which of the following would BEST prepare the organization to recover?

Which of the following is the MOST important success factor when developing an information security strategy?

Which of the following BEST demonstrates a security-conscious organizational culture?

Which of the following is the MOST effective data loss control when connecting a personally owned mobile device to the corporate email system?

Which of the following should be the FIRST step when performing triage of a malware incident?

Which of the following BEST helps to enable the desired information security culture within an organization?

Which of the following should be the GREATEST concern for an information security manager when an annual audit reveals the organization’s business continuity plan (BCP) has not been reviewed or updated in more than a year?

Which of the following is the MOST important goal of an information security program?

Which of the following BEST helps to ensure the effective execution of an organization’s disaster recovery plan (DRP)?

Which of the following would be MOST effective in reducing the impact of a distributed denial of service (DDoS) attack?

The PRIMARY reason for senior management to monitor information security metrics is to ensure:

Which of the following is the MOST important reason to perform a privacy impact assessment?

When reporting information security risk to senior management, it is MOST important to include:

Which of the following is MOST likely to improve an organization’s security culture?

Which of the following is MOST important to complete during the recovery phase of an incident response process before bringing affected systems back online?

What is the BEST way for an information security manager to improve the effectiveness of risk management in an organization that currently manages risk at the departmental level?

Which of the following is MOST helpful to an information security manager when determining service level requirements for an outsourced application?

Which of the following is MOST important to consider when planning the eradication of a cyberattack?

Which of the following BEST enables an information security manager to identify changes in the threat landscape due to emerging technologies?

An enterprise has decided to procure security services from a third-party vendor to support its information security program. Which of the following is MOST important to include in the vendor selection criteria?

The resilience requirements of an application are BEST determined by:

Which of the following BEST facilitates recovery of data lost as a result of a cybersecurity incident?

Which of the following is MOST important to the successful implementation of a new information security program?

An information security team has confirmed that threat actors are taking advantage of a newly announced critical vulnerability within an application. Which of the following should be done FIRST?

Which of the following is the MOST important consideration when evaluating the performance of existing security controls?

Which of the following metrics BEST demonstrates the effectiveness of an organization’s security awareness program?

Who should decide whether a specific control should be changed once risk is approved for mitigation?

When determining key risk indicators (KRIs) for use in an information security program it is MOST important to select:

Senior management has requested a budget cut for the information security program in the coming fiscal year. Which of the following should be the information security manager’s FIRST course of action?

What is the MOST important consideration when establishing metrics for reporting to the information security strategy committee?

Which of the following presents the GREATEST challenge when assessing the impact of emerging risk?

To effectively manage an organization’s information security risk, it is MOST important to:

Which of the following is the MOST useful input for an information security manager when updating the organization’s security policy?

The MOST effective way for an information security manager to secure senior management support for the information security strategy is by:

When engaging an external party to perform a penetration test, it is MOST important to:

Which of the following is the MOST effective way to convey information security responsibilities across an organization?

A financial institution is expanding to international jurisdictions and is mindful of protecting customer information. Which of the following should be of GREATEST concern?

When evaluating cloud storage solutions, the FIRST consideration should be:

Which of the following is the GREATEST benefit resulting from the introduction of data security standards for payment cards?

Which of the following should an information security manager establish FIRST to ensure security-related activities are adequately monitored?

Which of the following is the BEST approach for data owners to use when defining access privileges for users?

Which of the following is the BEST control to protect customer personal information that is stored in the cloud?

Which of the following is MOST important to include in an enterprise information security policy?

An information security manager wants to upgrade an organization’s workstations to a new operating system version. Which of the following would be MOST helpful to gain senior management support for the upgrade?

Which of the following is MOST important to define when creating information security management metrics?

A PRIMARY benefit of adopting an information security framework is that it provides:

It is MOST important that risk owners understand they are accountable for:

Which of the following is MOST important to include in security incident escalation procedures?

An organization has implemented a new email filter to mitigate risk associated with its email system. Who is BEST suited to be the control owner?

When introducing a new information asset, what is the MOST important responsibility of the asset owner?

When establishing an information security governance framework, it is MOST important for an information security manager to understand:

When updating the information security policy to accommodate a new regulation, the information security manager should FIRST:

Which of the following is the BEST way to align security and business strategies?

Which of the following should an information security manager do FIRST when developing a security framework?

A Software as a Service (SaaS) application has been implemented to support a critical business process. Which of the following is MOST important to include within the service level agreement (SLA) to ensure timely response to incidents affecting the application?

Of the following, who is BEST positioned to perform a business impact analysis (BIA)?

Which of the following is the BEST indication of an effective disaster recovery planning process?

Which of the following provides the BEST input to determine the level of protection needed for an IT system?

Which of the following should be the FIRST consideration for an information security manager after a security incident has been confirmed?

Which of the following actions will BEST resolve the root cause of a cyber incident involving unauthorized network access due to a critical vulnerability on a web server?

Following an unsuccessful denial of service (DoS) attack, identified weaknesses should be:

Which of the following is an information security manager’s MOST important action during the third-party provider selection process?

Which of the following risk assessment findings for an online-only business should be given the HIGHEST priority to address availability concerns?

At which stage of business continuity planning is risk identification performed?

An information security team plans to strengthen authentication requirements for a customer-facing site, but there are concerns it will negatively impact the user experience. Which of the following is the information security manager’s BEST course of action?

Which of the following is the PRIMARY reason for executive management to be involved in establishing an enterprise’s security management framework?

Which of the following is MOST important for an information security manager to consider when determining whether data should be stored?

A business unit recently integrated the organization’s new strong password policy into its business application which requires users to reset passwords every 30 days. The help desk is now flooded with password reset requests. Which of the following is the information security manager’s BEST course of action to address this situation?