Question 1191 · 1243 in bank
Which of the following would provide the MOST effective security outcome in an organization's contract management process?
Show answer
Answer: B
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following would provide the MOST effective security outcome in an organization's contract management process?
Answer: B
Which of the following is the BEST way to contain an SQL injection attack that has been detected by a web application firewall?
Answer: B
If Waf was able to detect, it is easy to switch into prevent. Blockin IP is very inefficient solution in case of L7 attacks.
Source: Adapted from community discussion — kimssster
Who is accountable for approving an information security governance framework?
Answer: A
Which of the following is the PRIMARY benefit achieved when an information security governance framework is aligned with corporate governance?
Answer: A
Which of the following is the BEST method to protect the confidentiality of data transmitted over the Internet?
Answer: C
Which of the following is the FIRST step when conducting a post-incident review?
Answer: C
Which of the following BEST facilitates the effectiveness of cybersecurity incident response?
Answer: C
A. SIEM is for incident identification. B. not helpful in response. c. Correct answer, helps in the response phase D. Not helpful
Source: Adapted from community discussion — Div26101994
A business requires a legacy version of an application to operate, but the application cannot be patched. To limit the risk exposure to the business, a firewall is implemented in front of the legacy application. Which risk treatment option has been applied?
Answer: C
An information security manager has recently been notified of potential security risks associated with a third-party service provider. What should be done NEXT to address this concern?
Answer: C
An information security manager has identified a major security event with potential noncompliance implications. Who should be notified FIRST?
Answer: C
CISM AIO 2nd - Incident Management Operations > Initiation - This section covers the answer based on the severity of the incident and the incident being declared. Open to any correction
Source: Adapted from community discussion — MSKid
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 1191. 1243 questions available.
Version 1.0.0. How we source questions