CISM practice questions 1,161–1,170

1. Question 1161 · 1243 in bank

   Which of the following should an information security manager do FIRST after discovering that a business unit has implemented a newly purchased application and bypassed the change management process?

   • AUpdate the change management process.
   • BRevise the procurement process.
   • CDiscuss the issue with senior leadership.
   • DRemove the application from production.

   Show answer

   Answer: C

   Explanation

   As an information security manager, the correct answer would be C. Discuss the issue with senior leadership. After discovering that a business unit has implemented a newly purchased application and bypassed the change management process, it is important to report this to senior leadership. This allows them to understand the situation and make informed decisions regarding the next steps. It is important to involve senior leadership, as they have the authority to address the issue appropriately and ensure that necessary actions are taken to mitigate any potential risks.

   Source: Adapted from community discussion — koala_lay

   Next question

2. Question 1162 · 1243 in bank

   An organization is strategizing on how to improve security awareness. Which of the following is MOST important to consider when developing this strategy?

   • ATechnical solutions for delivery
   • BCost to implement
   • COrganizational culture
   • DOrganizational maturity

   Show answer

   Answer: C

   Next question

3. Question 1163 · 1243 in bank

   A penetration test against an organization's external web application shows several vulnerabilities. Which of the following presents the GREATEST concern?

   • AVulnerabilities were caused by insufficient user acceptance testing (UAT).
   • BExploit code for one of the vulnerabilities is publicly available.
   • CAtules of engagement form was not signed prior to the penetration test.
   • DVulnerabilities were not found by internal tests.

   Show answer

   Answer: B

   Explanation

   The greatest concern among the given options would be option B: Exploit code for one of the vulnerabilities is publicly available. This is a significant concern because if the exploit code is publicly available, it means that it can be easily accessed and utilized by threat actors with malicious intent. This increases the likelihood of a successful attack on the organization's web application, potentially leading to unauthorized access, data breaches, or other types of security incidents. It is essential to address this vulnerability urgently and take appropriate actions to mitigate the risk.

   Source: Adapted from community discussion — koala_lay

   Next question

4. Question 1164 · 1243 in bank

   Which of the following is the GREATEST concern resulting from the lack of severity criteria in incident classification?

   • AThe service desk will be staffed incorrectly.
   • BTimely detection of attacks will be impossible.
   • CStatistical reports will be incorrect.
   • DEscalation procedures will be ineffective.

   Show answer

   Answer: D

   Explanation

   Time Detection of attacks has nothing with severity | Time detection may be regard the controls that you have. but classification will impact the escalation and communication process

   Source: Adapted from community discussion — devilend

   Next question

5. Question 1165 · 1243 in bank

   When evaluating cloud storage solutions, the FIRST consideration should be:

   • Ahow the organization's sensitive data will be transferred.
   • Bthe service level agreement (SLA) for encryption keys.
   • Cthe volume of data to be stored in the cloud.
   • Dalignment with the organization's data classification policy.

   Show answer

   Answer: D

   Next question

6. Question 1166 · 1243 in bank

   Which of the following would be the BEST way to maintain organization-wide support for an information security strategy?

   • AEnsure information security objectives are understood by key stakeholders.
   • BMonitor user activity to identify and track information security policy violations.
   • CPlace information security awareness materials in visible locations.
   • DEnsure information security policies are easily accessible.

   Show answer

   Answer: A

   Next question

7. Question 1167 · 1243 in bank

   A large organization is in the process of developing its information security program that involves working with several complex organizational functions. Which of the following will BEST enable the successful implementation of this program?

   • ASecurity governance
   • BSecurity policy
   • CSecurity metrics
   • DSecurity guidelines

   Show answer

   Answer: A

   Explanation

   Security governance provides the overarching framework, structure, and processes for managing and overseeing the organization's information security activities. It involves defining roles and responsibilities, establishing policies and procedures, and ensuring that security efforts align with the organization's strategic objectives. Security governance sets the tone for effective security management and coordination across various functions within the organization. While security policies, metrics, and guidelines are important components of an information security program, security governance is the foundation that ensures a holistic and well-coordinated approach to security.

   Source: Adapted from community discussion — Viperhunter

   Next question

8. Question 1168 · 1243 in bank

   Several critical systems have been compromised with malware. Which of the following is the BEST strategy to eradicate this incident?

   • AReimage the systems.
   • BBlock access to the impacted systems.
   • CPerform malware scanning.
   • DPerform a vulnerability assessment.

   Show answer

   Answer: A

   Next question

9. Question 1169 · 1243 in bank

   Which of the following is the MOST important success factor for maintaining an organizational security-aware culture?

   • ASenior management sign-off on security projects and resources
   • BRegular security training and simulation exercises
   • CRegular organization-wide reporting on the risk profile
   • DEmployee security policy acknowledgment

   Show answer

   Answer: B

   Next question

10. Question 1170 · 1243 in bank

    Senior management has expressed concern that the organization's intrusion prevention system (IPS) may repeatedly disrupt business operations. Which of the following BEST indicates that the information security manager has tuned the system to address this concern?

    • ADecreasing false positives
    • BDecreasing false negatives
    • CIncreasing false negatives
    • DIncreasing false positives

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 1161. 1243 questions available.