CISM practice questions 1,241–1,243

1. Question 1241 · 1243 in bank

   A finance department director has decided to outsource the organization's budget application and has identified potential providers. Which of the following actions should be initiated FIRST by the information security manager?

   • ADetermine the required security controls for the new solution.
   • BObtain audit reports on the service providers’ hosting environment.
   • CReview the disaster recovery plans (DRPs) of the providers.
   • DAlign the roles of the organization's and the service providers’ staffs.

   Show answer

   Answer: A

   Explanation

   This answer is wrong because, the finance director is yet to decide the provider to go with. A. Determine the required security controls for the new solution.... is the best answer.

   Source: Adapted from community discussion — Soleandheel

   Next question

2. Question 1242 · 1243 in bank

   What type of control is being implemented when a security information and event management (SIEM) system is installed?

   • ACorrective
   • BPreventive
   • CDeterrent
   • DDetective

   Show answer

   Answer: D

   Next question

3. Question 1243 · 1243 in bank

   Which of the following should be done FIRST when developing an information asset classification policy?

   • AIdentify accountability for information assets throughout the organization.
   • BEstablish the criteria that define an asset's classification level.
   • CIdentify existing security measures for protecting assets.
   • DObtain executive input to identify high-value assets to be classified.

   Show answer

   Answer: A

   Explanation

   I wanted to go B but I will go with A here, the below is the beginning to end... Inventory of assets -> Establish Asset Owner -> Establish the criteria that define an asset classification level -> Create asset classifications -> Get Asset Owner to classify the asset

   Source: Adapted from community discussion — yottabyte

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 1241. 1243 questions available.