Question 1011 · 1243 in bank
Which of the following should be the KEY consideration when creating an information security communication plan with industry peers?
Show answer
Answer: B
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following should be the KEY consideration when creating an information security communication plan with industry peers?
Answer: B
Which of the following is MOST effective for communicating forward-looking trends within security reporting?
Answer: A
A. Key risk indicators (KRIs) are most effective for communicating forward-looking trends within security reporting. KRIs are metrics that measure potential risks and help organizations to anticipate and respond to future security threats. They provide early warning signals that help organizations take proactive measures to prevent or mitigate risks.
Source: Adapted from community discussion — Broesweelies
An organization recently purchased data loss prevention (DLP) software but soon discovered the software fails to detect or prevent data loss. Which of the following should the information security manager do FIRST?
Answer: C
Why on earth people choose A? You should not change your security requirements right away, if you cannot implement the related measure efficiently. Instead, it would be wise to first look for the cause (e.g., why the DLP software is not working)? If nothing helps and you cannot implement measures as requirements state, then you might want to consider changing requirements (e.g., maybe requirements were wrongly set / identified). Option C is the right one for me.
Source: Adapted from community discussion — Josef4CISM
Network isolation techniques are immediately implemented after a security breach to.
Answer: B
Which of the following incident response phases involves actions to help safeguard critical systems while maintaining business operations?
Answer: A
An organization has received complaints from users that some of their files have been encrypted. These users are receiving demands for money to decrypt the files. Which of the following would be the BEST course of action?
Answer: C
C - Initiate Incident response-. The question mentions "course of action" not a single stage in incident response. Moreover, Containment (isolating affected systems) is part of the Incident response course of action
Source: Adapted from community discussion — pgonza
Which of the following has the GREATEST positive impact on the ability to execute a disaster recovery plan (DRP)?
Answer: B
The keyword here is the "Ability to execute a DRP". The only one that talks about execution is option (B) Conducting a walk-through of the plan. Rationale: (A) Updating the plan periodically is great for preparation, but that is not execution. (C) Storing the plan at an offsite location is not ideal cause no execution is taking place. In fact, you can even say that it inhibits execution cause of the segregation. (D) Communicating the plan to all stakeholders is incorrect cause telling someone is not the same as executing it.
Source: Adapted from community discussion — dark_3k03r
Which of the following is MOST important to include in monthly information security reports to the board?
Answer: D
D. If you are reporting to the board or senior leadership, IMO, you would want to keep it high level by using metrics to communicate with your analysis.
Source: Adapted from community discussion — CarlLimps
Which of the following activities is designed to handle a control failure that leads to a breach?
Answer: B
Which of the following is MOST important to consider when aligning a security awareness program with the organization's business strategy?
Answer: B
B. People and culture is the MOST important to consider when aligning a security awareness program with the organization's business strategy. This is because the success of the program largely depends on employee behavior and the acceptance of security culture within the organization. To align with the business strategy, the program must be designed to align with the company's values and integrate with existing processes, making it more effective and sustainable in the long run.
Source: Adapted from community discussion — Broesweelies
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 1011. 1243 questions available.
Version 1.0.0. How we source questions