Question 1051 · 1243 in bank
Which of the following would be the BEST way for an information security manager to improve the effectiveness of an organization's information security program?
Show answer
Answer: D
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following would be the BEST way for an information security manager to improve the effectiveness of an organization's information security program?
Answer: D
Which of the following should an information security manager do FIRST upon learning of noncompliance with an impending information security regulatory change?
Answer: C
Which of the following is MOST critical when creating an incident response plan?
Answer: A
Which of the following should be done FIRST when establishing security measures for personal data stored and processed on a human resources management system?
Answer: C
Answer C: First need to identify what are the PII / Sensitive / Confidential informations captured in HRMS. Assessment is required to do that
Source: Adapted from community discussion — karanvp
Which of the following would BEST help to ensure appropriate security controls are built into software?
Answer: A
Which of the following will BEST facilitate the integration of information security governance into enterprise governance?
Answer: D
Which of the following should an information security manager do FIRST when noncompliance with security standards is identified?
Answer: A
Its a vague question. I assume that "identified" means that the security manager has detected an event that needs further validation / conformation. Therefore, I go with A.
Source: Adapted from community discussion — Josef4CISM
Which of the following should be considered FIRST when recovering a compromised system that needs a complete rebuild?
Answer: D
Configuration Management Files: These files store the system's configuration settings and can help you understand how the system was initially set up. Restoring the correct configuration is crucial to ensure the rebuilt system functions as intended and is secure. After compromising an operating system, an attacker may make changes to the system configuration to maintain access, create backdoors, or otherwise manipulate the system. Reverting to a known good configuration is essential to eliminate these malicious changes.
Source: Adapted from community discussion — oluchecpoint
When deciding to move to a cloud-based model, the FIRST consideration should be:
Answer: A
Data classification involves categorizing data based on its sensitivity and importance to the organization. Before moving to a cloud-based model, it's crucial to understand the nature of the data that will be stored in the cloud. This classification helps in determining the appropriate level of security controls, access restrictions, and compliance requirements for each type of data. It lays the foundation for making informed decisions about how different types of data will be handled in the cloud environment.
Source: Adapted from community discussion — TamerBeSafe
Which of the following is the PRIMARY objective of incident triage?
Answer: C
C. Categorization of events Incident triage involves quickly assessing and categorizing incidents based on their severity, impact, and urgency. This helps prioritize the response and allocate resources effectively. While containment of threats, coordination of communications, and mitigation of vulnerabilities are important aspects of incident response, categorization is the initial step in the triage process to determine the nature and scope of the incident.
Source: Adapted from community discussion — oluchecpoint
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 1051. 1243 questions available.
Version 1.0.0. How we source questions