CISM practice questions 1,151–1,160

1. Question 1151 · 1243 in bank

   An information security manager has completed a risk assessment and has determined the residual risk. Which of the following should be the NEXT step?

   • AImplement countermeasures to mitigate risk.
   • BClassify all identified risks.
   • CConduct an evaluation of controls.
   • DDetermine if the risk is within the risk appetite.

   Show answer

   Answer: D

   Explanation

   D. Determine if the risk is within the risk appetite. When it comes to residual risk, determining the risk appetite is most essential. If the residual risk is within the organizations risk appetite threshold then the residual risk can be managed but if it is above the organizations risk appetite threshold then the organization could decide on other measures like risk transference e.g. Insurance... etc.

   Source: Adapted from community discussion — Soleandheel

   Next question

2. Question 1152 · 1243 in bank

   Which of the following BEST enables an organization to maintain an appropriate security control environment?

   • APeriodic employee security training
   • BBudgetary support for security
   • CAlignment to an industry security framework
   • DMonitoring of the threat landscape

   Show answer

   Answer: D

   Explanation

   oh man, don't you just LOVE all those random chatgpt/bard/copilot answers being plastered all over the discussion sections... This sht it killing the site value!... Anyway, I think it's D. You're monitoring what's going on in the wild lands and based on that you figure out the risks and adjust controls where necessary (maintaining an "appropriate security controls environment").

   Source: Adapted from community discussion — AlexJacobson

   Next question

3. Question 1153 · 1243 in bank

   Which of the following is MOST important for responding effectively to security breaches?

   • AChain of custody
   • BIncident classification
   • CLog monitoring
   • DCommunication plan

   Show answer

   Answer: B

   Explanation

   I am divided between incident classification and communication plan. For the sake of discussion, without understanding the severity of the incident and criticality of the asset at risk, how do we determine which aspect of the communication plan applies to an identified incident? Like which stakeholders to inform, what information to share etc.?

   Source: Adapted from community discussion — CISSPST

   Next question

4. Question 1154 · 1243 in bank

   Which of the following is the BEST method for assisting with incident containment in an Infrastructure as a Service (IaaS) cloud environment?

   • ADisabling unnecessary services
   • BImplementing privileged identity management
   • CEstablishing automated detection
   • DImplementing network segmentation

   Show answer

   Answer: D

   Next question

5. Question 1155 · 1243 in bank

   What is the PRIMARY benefit of effective configuration management?

   • AStandardization of system support
   • BReduced frequency of incidents
   • CDecreased risk to the organization's systems
   • DImproved vulnerability management

   Show answer

   Answer: C

   Explanation

   C. Decreased risk to the organization's systems is the PRIMARY benefit of effective configuration management. Configuration management is the process of identifying, documenting, and controlling changes to systems and devices within an organization's infrastructure. By effectively managing configurations, the organization can minimize the risk of unauthorized changes, ensure that systems are in compliance with security policies, and easily identify and rollback any changes that may have introduced security vulnerabilities. A, B, and D are also benefits of effective configuration management, but they are secondary to the primary benefit which is decreased risk to the organization's systems. Standardization of system support ensures that all systems are configured and maintained in a consistent manner; Reduced frequency of incidents help to minimize the number of security incidents that occur; Improved vulnerability management help to identify and address vulnerabilities in a timely manner.

   Source: Adapted from community discussion — Broesweelies

   Next question

6. Question 1156 · 1243 in bank

   Which of the following should be performed FIRST in response to a new information security regulation?

   • AIndustry benchmarking
   • BIndependent audit
   • CRisk assessment
   • DGap analysis

   Show answer

   Answer: D

   Explanation

   D. Gap analysis The gap analysis aims to identify areas of improvement or potential risks that may affect operations. Risk assessment aims to identify and prioritize areas of risk so actions can be taken to mitigate them.

   Source: Adapted from community discussion — wickhaarry

   Next question

7. Question 1157 · 1243 in bank

   To ensure the information security of outsourced IT services, which of the following is the MOST critical due diligence activity?

   • AAssess the level of security awareness of the service provider.
   • BReview a recent independent audit report of the service provider.
   • CReview samples of service level reports from the service provider.
   • DRequest the service provider comply with information security policy.

   Show answer

   Answer: B

   Next question

8. Question 1158 · 1243 in bank

   Which of the following is the MOST important reason to consider organizational culture when developing an information security program?

   • AIt helps expedite approval for the information security budget.
   • BIt helps the organization meet compliance requirements.
   • CEveryone in the organization is responsible for information security.
   • DSecurity incidents have an adverse impact on the entire organization.

   Show answer

   Answer: C

   Next question

9. Question 1159 · 1243 in bank

   Which of the following processes BEST supports the evaluation of incident response effectiveness?

   • APost-incident review
   • BChain of custody
   • CIncident logging
   • DRoot cause analysis

   Show answer

   Answer: A

   Next question

10. Question 1160 · 1243 in bank

    Which of the following should an information security manager do FIRST after learning through mass media of a data breach at the organization's hosted payroll service provider?

    • AValidate the breach with the provider.
    • BSuspend the data exchange with the provider.
    • CNotify appropriate regulatory authorities of the breach.
    • DInitiate the business continuity plan (BCP).

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 1151. 1243 questions available.