Question 161 · 1243 in bank
When reporting information security risk to senior management, it is MOST important to include:
Show answer
Answer: D
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
When reporting information security risk to senior management, it is MOST important to include:
Answer: D
Which of the following is MOST likely to improve an organization's security culture?
Answer: A
Which of the following is MOST important to complete during the recovery phase of an incident response process before bringing affected systems back online?
Answer: A
What is the BEST way for an information security manager to improve the effectiveness of risk management in an organization that currently manages risk at the departmental level?
Answer: D
Which of the following is MOST helpful to an information security manager when determining service level requirements for an outsourced application?
Answer: A
A - This plan outlines how the supplier will maintain operations during disruptions (e.g., disasters, outages). It directly impacts service availability and continuity. Understanding the supplier’s BCP helps set appropriate service level requirements.
Source: Adapted from community discussion — Booict
Which of the following is MOST important to consider when planning the eradication of a cyberattack?
Answer: D
D- Eradication is the key word which in essence is deep cleaning. Knowing what to clean and where to clean to eradicate fully is the most important knowledge.
Source: Adapted from community discussion — shootnot
The authorization to transfer the handling of an internal security incident to a third-party support provider is PRIMARILY defined by the:
Answer: A
The correct answer is (A) escalation procedures cause the steps are defined here by ISM and other stakeholders. Rationale: (B.) the information security manager is incorrect. Because escalation procedures are usually done alongside stakeholders and not just by the infosec manager. This is because the infosec manager may or may not be present. The infosec manager may or may not represent the interest of the business correctly. Even if he could do it well without eh business, if the manager leaves another manager may have a different process entirely. So this leads to inconsistency. Instead, the infosec manager alongside stakeholders should document it in an escalation procedure, and his predecessor/successor review and improve it. So it is instead preferred to have it in a documented process which is (A). (C.) chain of custody is how you enforce it, but not authorize it. Authorization is by the infosec manager by what has been defined in the escalation procedures. (D.) disaster recovery plan (DRP) relates to incidents and not necessarily security incidents.
Source: Adapted from community discussion — dark_3k03r
Which of the following BEST enables an information security manager to identify changes in the threat landscape due to emerging technologies?
Answer: C
An enterprise has decided to procure security services from a third-party vendor to support its information security program. Which of the following is MOST important to include in the vendor selection criteria?
Answer: C
C. Alignment of the vendor's business objectives with enterprise security goals When selecting a third-party vendor to provide security services, it is crucial to ensure that their business objectives align with the enterprise's security goals. This alignment ensures that the vendor's services and solutions will effectively support the enterprise's information security program.
Source: Adapted from community discussion — J3young
The resilience requirements of an application are BEST determined by:
Answer: C
C - BIA BIA helps understanding the business impact of application downtime or data loss, you can establish the necessary resilience requirements, such as redundancy, failover mechanisms, and disaster recovery plans.
Source: Adapted from community discussion — sausageman
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 161. 1243 questions available.
Version 1.0.0. How we source questions