Question 1041 · 1243 in bank
The PRIMARY objective of a post-incident review of an information security incident is to:
Show answer
Answer: C
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
The PRIMARY objective of a post-incident review of an information security incident is to:
Answer: C
The MOST appropriate time to conduct a disaster recovery test would be after:
Answer: C
business processes have been redesigned doesn't mean "implemented". DR shouldn't be tested as long as a new "design" comes up. so should be C.
Source: Adapted from community discussion — realmjmj
Which of the following methods is the BEST way to demonstrate that an information security program provides appropriate coverage?
Answer: D
D. Security Risk Analysis. Security risk analysis assesses the organization's overall security posture by identifying and analyzing risks. It evaluates the effectiveness of security controls and their alignment with business objectives. A well-conducted security risk analysis provides a comprehensive view of the security program's coverage and its ability to address the organization's specific risks and threats. It is considered the most comprehensive and strategic method for demonstrating appropriate coverage.
Source: Adapted from community discussion — oluchecpoint
The MOST important reason to use a centralized mechanism to identify information security incidents is to:
Answer: B
B. detect threats across environments While the other options (A, C, and D) are also important considerations in information security, the primary purpose of a centralized incident identification mechanism is to detect and respond to security threats and incidents consistently across an organization's various environments and systems. This helps in early threat detection and minimizing the potential impact of security incidents. Compliance with corporate policies, preventing unauthorized changes, and detecting potential fraud are important goals as well, but they are often secondary to the central goal of identifying and mitigating security threats.
Source: Adapted from community discussion — oluchecpoint
Which of the following is an information security manager's MOST important course of action when responding to a major security incident that could disrupt the business?
Answer: C
An information security manager determines there are a significant number of exceptions to a newly released industry-required security standard. Which of the following should be done NEXT?
Answer: C
By conducting a thorough assessment of the consequences, the information security manager can gain insights into the potential risks and their potential impacts on the organization's overall security and compliance posture. This assessment provides valuable information for decision-making, prioritizing remediation efforts, and determining the appropriate course of action to address the exceptions to the security standard. Once the consequences of noncompliance have been assessed, the information security manager can then proceed with appropriate actions, such as implementing additional controls, mitigating identified risks, revising security policies or procedures, or seeking further guidance from relevant stakeholders.
Source: Adapted from community discussion — wello
Which of the following BEST facilitates effective incident response testing?
Answer: C
The information security manager has been notified of a new vulnerability that affects key data processing systems within the organization. Which of the following should be done FIRST?
Answer: A
Which of the following is the BEST way to assess the risk associated with using a Software as a Service (SaaS) vendor?
Answer: D
D? The best way to assess the risk associated with using a Software as a Service (SaaS) vendor is to review the results of the vendor's independent control reports. This will help you to understand the vendor's security practices and procedures, and to identify any potential risks.
Source: Adapted from community discussion — Pabl0T0rrez
Security administration efforts will be greatly reduced following the deployment of which of the following techniques?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 1041. 1243 questions available.
Version 1.0.0. How we source questions