Question 1201 · 1243 in bank
An email digital signature will:
Show answer
Answer: B
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
An email digital signature will:
Answer: B
An information security manager learns that business unit leaders are encouraging increased use of social media platforms to reach customers. Which of the following should be done FIRST to help mitigate the risk of confidential information being disclosed by employees on social media?
Answer: A
Which of the following BEST facilitates effective strategic alignment of security initiatives?
Answer: B
Procedures and standards are internal to security department. So, I'll go with B. Business units agreeing on priorities such as policies and security initiatives promotes cooperation and alignment.
Source: Adapted from community discussion — CISSPST
Which of the following is MOST important to maintain integration among the incident response plan, business continuity plan (BCP), and disaster recovery plan (DRP)?
Answer: D
The common thing between IR , BCP and DRP is who initiate the call to each stage , which leading to Escalation Procedure. by identifying the classification and escalation process will allow the right call when BCP need to be initiated and DR
Source: Adapted from community discussion — devilend
An information security program is BEST positioned for success when it is closely aligned with:
Answer: D
Which of the following should an information security manager do FIRST after identifying suspicious activity on a PC that is not in the organization's IT asset inventory?
Answer: A
Well, after a lot of thinking, I still think it's A. Besides, if it's not in the inventory, that means that some procedures haven't been followed (adding the system to the network, being it a company-owned or BYOD) and it's potentially a rogue device. So containment takes precedence in this case since suspicious activity has been identified, IMO.
Source: Adapted from community discussion — AlexJacobson
Which of the following is the MOST important consideration when briefing executives about the current state of the information security program?
Answer: B
If executives can't grasp the information due to language or terminology barriers, the effectiveness of the briefing may be compromised. Therefore, using appropriate language for the target audience should be the top priority when briefing executives.
Source: Adapted from community discussion — oluchecpoint
An organization has multiple data repositories across different departments. The information security manager has been tasked with creating an enterprise strategy for protecting data. Which of the following information security initiatives should be the HIGHEST priority for the organization?
Answer: A
A. Data loss prevention (DLP). Data loss prevention (DLP) is a crucial initiative for protecting sensitive data. It helps in detecting and preventing unauthorized access, use, and transmission of sensitive information. Given that the organization has multiple data repositories across different departments, implementing DLP measures can help in ensuring that sensitive data is not leaked, misused, or accessed by unauthorized individuals. It provides a proactive approach to safeguarding data and mitigating potential security breaches.
Source: Adapted from community discussion — oluchecpoint
Which of the following is ESSENTIAL to ensuring effective incident response?
Answer: C
Guys, does this mean "senior management support/buy-in" is the magic "catch-all, always correct" answer on CISM exam? I don't think so. Hence going with C.
Source: Adapted from community discussion — AlexJacobson
Which of the following is the BEST indicator of an organization's information security status?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 1201. 1243 questions available.
Version 1.0.0. How we source questions