Question 1181 · 1243 in bank
Which of the following is the BEST approach for an information security manager to develop an organization's information security strategy?
Show answer
Answer: B
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following is the BEST approach for an information security manager to develop an organization's information security strategy?
Answer: B
Which of the following is the BEST way to monitor the effectiveness of security controls?
Answer: C
An organization experienced a data breach that affected many of its clients. Legal counsel found out about this event only after a press release was issued. Which of the following would have been MOST helpful in preventing this situation?
Answer: C
C. Tabletop testing of the incident response plan......The IRP will contain the communication plan which helps address the issue in the Tabletop exercise.
Source: Adapted from community discussion — Soleandheel
Which of the following would MOST effectively ensure that a new server is appropriately secured?
Answer: A
Enforcing technical security standards ensures that the server is configured and maintained according to best practices and security guidelines. These standards typically cover various aspects of server security, such as hardening, patch management, access controls, and monitoring. By adhering to these standards, organizations can systematically address security risks and vulnerabilities, leading to a more secure server environment.
Source: Adapted from community discussion — HN2025
Spoofing should be prevented because it may be used to:
Answer: D
Which of the following is MOST important to have in place for an organization's information security program to be effective?
Answer: A
When assigning a risk owner, the MOST important consideration is to ensure the owner has:
Answer: B
After a ransomware incident, an organization's systems were restored. Which of the following should be of MOST concern to the information security manager?
Answer: C
A small organization has a contract with a multinational cloud computing vendor. Which of the following would present the GREATEST concern to an information security manager if omitted from the contract?
Answer: C
From ISACA's point of view, the correct answer is C. Authority of the subscriber to approve access to its data. This is because the subscriber must have control over the access to its data in order to maintain confidentiality and privacy. If this authority is omitted from the contract, the subscriber may not have a say in who can access its data, which could lead to unauthorized access or a breach of confidentiality. Escrow of software code, the right to conduct onsite audits, and commingling of data are all important considerations, but they are not as critical as the subscriber's authority to approve access to its data.
Source: Adapted from community discussion — mad68
To improve the efficiency of the development of a new software application, security requirements should be defined:
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 1181. 1243 questions available.
Version 1.0.0. How we source questions