CISM Final Assessment 5

Which of the following is the MOST important objective when planning an incident response program?

Which of the following considerations is MOST important when selecting a third-party intrusion detection system (IDS) vendor?

A financial institution is planning to develop a new mobile application. Which of the following is the BEST time to begin assessments of the application’s security compliance?

When considering a new security initiative, which of the following should be done prior to the development of a business case?

Which of the following BEST demonstrates the potential for successful business continuity in the event of a disaster?

Which of the following is an essential practice for workstations used to conduct a forensic investigation?

Which of the following components of the risk assessment process should be reviewed FIRST to gain an understanding of the scope of an emerging risk within an organization?

An information security manager has been tasked with implementing a security solution that provides insight into potential security incidents Which of the following BEST supports this activity?

Which of the following is MOST important for the information security manager to confirm when reviewing an incident response plan?

Unintentional behavior by an employee caused a major data loss incident. Which of the following is the BEST way for the information security manager to prevent recurrence within the organization?

Exceptions to a security policy should be approved based PRIMARILY on:

When developing a business case for a new security initiative, an information security manager should FIRST:

A proposal designed to gain buy-in from senior management for a new security project will be MOST effective if it includes:

Which of the following is MOST important for an information security steering committee to ensure?

An organization experienced a breach which was successfully contained and remediated. Based on industry regulations, the breach needs to be communicated externally. What should the information security manager do NEXT?

Which of the following is the BEST defense against a brute force attack?

Which of the following is MOST important to verify during a test of an organization’s incident response process?

An intrusion prevention system (IPS) has reported a significant increase in the number of hacking attempts over the past month, though no systems have actually been compromised. Which of the following should the information security manager do FIRST?

The likelihood of a successful intrusion is a function of:

Which of the following is the BEST evidence that senior management supports the information security program?

During incident recovery, which of the following is the BEST approach to ensure the eradication of traces hidden by an attacker?

Which of the following BEST enables the effectiveness of an information security training program for new employees?

An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization’s CEO in an attempt to commit wire transfer fraud. Which of the following is the BEST way to reduce the risk associated with this type of attack?

Which of the following is the BEST indication of effective information security governance?

A data loss prevention (DLP) tool has flagged personally identifiable information (PII) during transmission. Which of the following should the information security manager do FIRST?

Which of the following is MOST likely to require an organization to update its business continuity plan (BCP)?

Which of the following is the GREATEST benefit of performing a tabletop exercise of the business continuity plan (BCP)?

Which of the following is the BEST approach for encouraging business units to assume their roles and responsibilities in an information security program?

Which of the following is MOST influential in driving the effectiveness of an information security program?

The MAIN reason for having senior management review and approve an information security strategic plan is to ensure:

Which of the following is the GREATEST risk associated with a poorly trained incident response team responding to a major incident?

Which of the following is the PRIMARY preventive method to mitigate risks associated with privileged accounts?

Which of the following BEST enables an incident response team to determine appropriate actions during an initial investigation?

An organization’s service desk has reported that a PC is displaying a message with the phrase “your personal files are encrypted.” Which of the following should be done FIRST?

When multiple Internet intrusions on a server are detected, the PRIMARY concern of the information security manager should be to ensure:

Which of the following groups is MOST important to involve in the development of information security procedures?

Which of the following would be MOST useful to determine the current status of an information security program’s maturity level?

The MOST significant outcome obtained from conducting a business impact analysis (BIA) is improved:

Which of the following BEST indicates ongoing senior management commitment to the organization’s information security strategy?

Which of the following is MOST important for the information security manager to include when presenting changes in the security risk profile to senior management?

Which of the following is the MOST important objective when recommending controls?

Which of the following should an organization do FIRST upon learning that a subsidiary is located in a country where civil unrest has just begun?

After updating password standards, an information security manager is alerted by various application administrators that the applications they support are incapable of enforcing these standards. The information security manager’s FIRST course of action should be to:

Which of the following is a PRIMARY responsibility of a data owner?

Which of the following is MOST helpful for retaining the support of executive management for an information security program?

When performing a business impact analysis (BIA), which of the following is the MOST important reason to determine the maximum tolerable downtime (MTD)?

Which of the following processes should remain internal when outsourcing IT operations?

An organization plans to adopt a DevOps approach for innovative application development. Which of the following should be the information security manager’s MOST important consideration with regard to the information security strategy?

Which of the following is the MOST important reason to integrate nonrepudiation into the design of user authentication?

A significant risk was identified within a core business function. Budget constraints do not allow for effective remediation. Who should be accountable for selecting the appropriate risk treatment?

An information security manager is building a business case to support an investment in a next generation firewall. Which of the following would BEST maximize the effectiveness of the business case?