Question 131 · 1243 in bank
Which of the following is the PRIMARY objective of information asset classification?
Show answer
Answer: C
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following is the PRIMARY objective of information asset classification?
Answer: C
Which of the following trends would be of GREATEST concern when reviewing the performance of an organization's intrusion detection systems (IDSs)?
Answer: A
False negatives occur when the IDS does not alert on an attack or malicious activity that is present. This is much more of a concern than false positives--at least the IDS is detecting something with those.
Source: Adapted from community discussion — isaphiltrick
Management would like to understand the risk associated with engaging an Infrastructure-as-a-Service (IaaS) provider compared to hosting internally. Which of the following would provide the BEST method of comparing risk scenarios?
Answer: B
question is about the 'method' of comparing risk scenarios. C would only give risk but nothing to compare to decision making
Source: Adapted from community discussion — shootnot
The BEST way to avoid session hijacking is to use:
Answer: D
D. using a secure protocol like HTTPS is the most effective way to protect against session hijacking by ensuring that the session data is encrypted and secured during transmission between the user and the server.
Source: Adapted from community discussion — oluchecpoint
Which of the following is the PRIMARY reason to regularly update business continuity and disaster recovery documents?
Answer: D
Which of the following will have the GREATEST impact on the development of the information classification scheme consisting of various classification levels?
Answer: A
I think it's A. If i were to follow your train of thought, i would consider the organizational structure to have the greatest impact. If we evaluate C or D, the owners, of the information, based on the organizational structure, would give us the information we are looking for, which is the value of the information, which we need, to classify it properly.
Source: Adapted from community discussion — ElDirec
To prepare for a third-party forensics investigation following an incident involving malware, the incident response team should:
Answer: D
Of the following, who should own the risk associated with unauthorized access to application data?
Answer: C
The categorization of incidents is MOST important for evaluating which of the following?
Answer: B
An organization learns that a third party has outsourced critical functions to another external provider. Which of the following is the information security manager's MOST important course of action?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 131. 1243 questions available.
Version 1.0.0. How we source questions