CISM practice questions 101–110

1. Question 101 · 1243 in bank

   A recent audit found that an organization's new user accounts are not set up uniformly. Which of the following is MOST important for the information security manager to review?

   • ASecurity policies
   • BAutomated controls
   • CGuidelines
   • DStandards

   Show answer

   Answer: D

   Explanation

   The correct answer is D: Standards The reason for this as followed: (a) Security policies - dictate what must be done, but not how. This leaves it open to interpretation and thus the possibilities for inconsistencies. (b) Automated Control do make things consistent, but this is not the security manager's role. This is a tech solution. (c) Guidelines are suggestions, not mandatory things to do, and thus can result in inconsistencies. (d) Standard make things mandatory and consistent. Thus why it's the correct answer.

   Source: Adapted from community discussion — dark_3k03r

   Next question

2. Question 102 · 1243 in bank

   When an organization experiences a disruptive event, the business continuity plan (BCP) should be triggered PRIMARILY based on:

   • Aexpected duration of outage.
   • Bthe root cause of the event.
   • Ctype of security incident.
   • Dmanagement direction.

   Show answer

   Answer: A

   Explanation

   The business continuity plan (BCP) should be triggered primarily based on the expected duration of outage (Option A). This approach ensures that the organization can respond promptly to minimize downtime and maintain critical operations

   Source: Adapted from community discussion — hargit

   Next question

3. Question 103 · 1243 in bank

   Which of the following controls would BEST help to detect a targeted attack exploiting a zero-day vulnerability?

   • AIntrusion prevention system (IPS)
   • BVulnerability scanning
   • CEndpoint detection and response (EDR)
   • DExtended detection and response (XDR)

   Show answer

   Answer: D

   Explanation

   D- XDR provides a holistic view of environment by detecting incidents based on the logs from multiple sources and provide attack path analysis.

   Source: Adapted from community discussion — shootnot

   Next question

4. Question 104 · 1243 in bank

   Which of the following is the MOST relevant control to address the integrity of information?

   • AImplementation of a redundant server system
   • BEncryption of email
   • CImplementation of an Internet security application
   • DAssignment of appropriate access permissions

   Show answer

   Answer: D

   Explanation

   Access permissions help protect data integrity by ensuring only authorized individuals can modify or delete information. This minimizes the risk of accidental or malicious changes to critical data.

   Source: Adapted from community discussion — Div26101994

   Next question

5. Question 105 · 1243 in bank

   What should be the PRIMARY objective of an information classification scheme?

   • ATo define data retention requirements
   • BTo develop an asset inventory
   • CTo meet legislative and regulatory requirements
   • DTo implement controls proportionate to risk

   Show answer

   Answer: D

   Next question

6. Question 106 · 1243 in bank

   Which of the following is MOST important to consider when prioritizing threats during the risk assessment process?

   • ARegulatory requirements on the organization
   • BThe severity of exploited vulnerabilities
   • CThe threat landscape within the industry
   • DThe potential impact on operations

   Show answer

   Answer: D

   Next question

7. Question 107 · 1243 in bank

   Which of the following would BEST fulfill a board of directors' request for a concise overview of information security risk facing the business?

   • ABusiness impact analysis (BIA)
   • BBalanced scorecard
   • CRisk heat map
   • DRisk scenario summary

   Show answer

   Answer: C

   Next question

8. Question 108 · 1243 in bank

   Which of the following is the PRIMARY purpose of a business impact analysis (BIA)?

   • ATo define security roles and responsibilities
   • BTo determine the criticality of information assets
   • CTo establish incident severity levels
   • DTo determine return on investment (ROI)

   Show answer

   Answer: B

   Next question

9. Question 109 · 1243 in bank

   An organization wants to integrate information security into its HR management processes. Which of the following should be the FIRST step?

   • ACalculate the return on investment (ROI).
   • BProvide security awareness training to HR.
   • CAssess the business objectives of the processes.
   • DBenchmark the processes with best practice to identify gaps.

   Show answer

   Answer: C

   Next question

10. Question 110 · 1243 in bank

    Following a breach where the risk has been isolated and forensic processes have been performed, which of the following should be done NEXT?

    • APlace the web server in quarantine.
    • BRebuild the server from the last verified backup.
    • CShut down the server in an organized manner.
    • DRebuild the server with relevant patches from the original media.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 101. 1243 questions available.