Question 171 · 1243 in bank
Which of the following BEST facilitates recovery of data lost as a result of a cybersecurity incident?
Show answer
Answer: B
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following BEST facilitates recovery of data lost as a result of a cybersecurity incident?
Answer: B
Which of the following is MOST important to the successful implementation of a new information security program?
Answer: B
An information security team has confirmed that threat actors are taking advantage of a newly announced critical vulnerability within an application. Which of the following should be done FIRST?
Answer: C
Which of the following is the MOST important consideration when evaluating the performance of existing security controls?
Answer: C
Which of the following metrics BEST demonstrates the effectiveness of an organization's security awareness program?
Answer: C
Who should decide whether a specific control should be changed once risk is approved for mitigation?
Answer: C
C-he control owner oversees the implementation, monitoring, and adjustment of controls to address identified risks. They ensure that controls remain effective and aligned with risk management objectives
Source: Adapted from community discussion — Booict
When determining key risk indicators (KRIs) for use in an information security program it is MOST important to select:
Answer: B
B. KRIs that align with business processes: KRIs should be selected based on their ability to effectively monitor and measure the risks associated with the organization's critical business processes. This ensures that the KRIs are directly relevant to the organization's operations and priorities, and can provide meaningful insights for risk management.
Source: Adapted from community discussion — koala_lay
What is the PRIMARY objective of performing a vulnerability assessment following a business system update?
Answer: D
According to ISACA, the primary objective of performing a vulnerability assessment following a business system update is "D. Review the effectiveness of controls." A vulnerability assessment is a process that aims to identify, assess and prioritize vulnerabilities in an organization's systems, networks and applications. The primary objective of performing a vulnerability assessment following a business system update is to ensure that the new updates have not introduced any new vulnerabilities or weaknesses that could be exploited by attackers. It is important to conduct a vulnerability assessment as part of a continuous monitoring process to identify and address any vulnerabilities that could impact the effectiveness of the implemented controls.
Source: Adapted from community discussion — Broesweelies
Senior management has requested a budget cut for the information security program in the coming fiscal year. Which of the following should be the information security manager's FIRST course of action?
Answer: A
A - This is the critical first step. The manager must assess how the budget cut affects security initiatives, controls, and risk management. Understanding the impact informs subsequent decisions.
Source: Adapted from community discussion — Booict
What is the MOST important consideration when establishing metrics for reporting to the information security strategy committee?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 171. 1243 questions available.
Version 1.0.0. How we source questions