Question 141 · 1243 in bank
An organization has acquired a new system with strict maintenance instructions and schedules. Where should this information be documented?
Show answer
Answer: B
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
An organization has acquired a new system with strict maintenance instructions and schedules. Where should this information be documented?
Answer: B
The PRIMARY benefit of using http secure (https) is that it provides:
Answer: A
An organization provides notebook PCs, cable wire locks, smartphone access, and virtual private network (VPN) access to its remote employees. Which of the following is MOST important for the information security manager to ensure?
Answer: A
C - Use the VPN when accessing the organization’s online resources is crucial. VPNs encrypt communication, ensuring confidentiality and secure access. This directly mitigates risks associated with remote connections. Option A is it is not the most critical concern when providing remote access to employees. Acceptable use policies cover general guidelines, but they don’t directly address the security of remote connections.
Source: Adapted from community discussion — Booict
To improve an organization's information security culture, it is MOST important for senior management to:
Answer: C
A critical server for a hospital has been encrypted by ransomware. The hospital is unable to function effectively without this server. Which of the following would MOST effectively allow the hospital to avoid paying the ransom?
Answer: C
A properly tested offline backup system would be the most effective way to avoid paying the ransom in this scenario. With a proper offline backup system, the hospital would be able to recover the encrypted server without paying the ransom. Continual server replication, employee training on ransomware, and a properly configured firewall may help prevent ransomware attacks, but they would not help the hospital avoid paying the ransom in this scenario.
Source: Adapted from community discussion — mad68
Which of the following BEST illustrates residual risk within an organization?
Answer: D
Risk heat maps are used to present cyber risk assessment results in an easy to understand, visually attractive and concise format.
Source: Adapted from community discussion — afoo1314
Which of the following is the MOST effective way to determine the alignment of an information security program with the business strategy?
Answer: C
The question asks about the most EFFECTIVE way. KPI's are aligned with the business objectives and by reviewing them, the security manager can quickly assess the business alignment.
Source: Adapted from community discussion — Josef4CISM
An organization experienced a loss of revenue during a recent disaster. Which of the following would BEST prepare the organization to recover?
Answer: D
BIA is a preparatory step that identifies which business processes are essential, their dependencies and the potential impact of a disruption to those processes. The BIA itself does not include strategies or actions for recovery. In contrast, a BCP uses the insights gained from a BIA to develop plans to ensure the business can continue operating during and recover after a disaster. In this scenario, a BCP would have been most helpful.
Source: Adapted from community discussion — helg420
Which of the following is the MOST important success factor when developing an information security strategy?
Answer: D
Which of the following BEST demonstrates a security-conscious organizational culture?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 141. 1243 questions available.
Version 1.0.0. How we source questions