CISM practice questions 181–190

1. Question 181 · 1243 in bank

   Which of the following presents the GREATEST challenge when assessing the impact of emerging risk?

   • AOutdated risk management strategy
   • BInsufficient data related to the emerging risk
   • CComplexity of the emerging risk
   • DLack of resources to perform risk assessments

   Show answer

   Answer: B

   Next question

2. Question 182 · 1243 in bank

   To effectively manage an organization’s information security risk, it is MOST important to:

   • Aestablish and communicate risk tolerance.
   • Bbenchmark risk scenarios against peer organizations.
   • Cassign risk management responsibility to an experienced consultant.
   • Dperiodically identify and correct new systems vulnerabilities.

   Show answer

   Answer: A

   Next question

3. Question 183 · 1243 in bank

   Which of the following is the MOST useful input for an information security manager when updating the organization’s security policy?

   • ASecurity team capabilities
   • BRisk appetite
   • CVulnerability scan
   • DIndustry best practices

   Show answer

   Answer: B

   Next question

4. Question 184 · 1243 in bank

   The MOST effective way for an information security manager to secure senior management support for the information security strategy is by:

   • Apresenting industry-specific information security best practices.
   • Bdetermining cost effective information security controls.
   • Ceducating management on information security program needs.
   • Ddeveloping reports showing current threats to the organization.

   Show answer

   Answer: C

   Explanation

   C - Senior management needs awareness of the organization’s security needs, risks, and strategic objectives. Informed Decisions: When management understands program needs, they can make informed decisions and allocate resources effectively.

   Source: Adapted from community discussion — Booict

   Next question

5. Question 185 · 1243 in bank

   When engaging an external party to perform a penetration test, it is MOST important to:

   • Aprovide an updated asset inventory.
   • Bnotify employees of the testing.
   • Cdefine the project scope.
   • Dprovide network documentation.

   Show answer

   Answer: C

   Explanation

   Have to define the scope so they are testing your public IPs and not someone else's IPs. Also do you want risky test that may take down a system etc.

   Source: Adapted from community discussion — Dice974

   Next question

6. Question 186 · 1243 in bank

   Which of the following is the MOST effective way to convey information security responsibilities across an organization?

   • AImplementing security awareness programs
   • BDefining information security responsibilities in the security policy
   • CDeveloping a skills matrix
   • DDocumenting information security responsibilities within job descriptions

   Show answer

   Answer: D

   Explanation

   D. Documenting information security responsibilities within job descriptions. This makes information security a part of everyone’s role, not just the security team’s responsibility. That’s what makes it the most effective way to consistently convey responsibilities.

   Source: Adapted from community discussion — SHERLOCKAWS

   Next question

7. Question 187 · 1243 in bank

   A financial institution is expanding to international jurisdictions and is mindful of protecting customer information. Which of the following should be of GREATEST concern?

   • AAbility to monitor and enforce security controls in multiple jurisdictions
   • BGlobal payment card industry regulations
   • CPrivacy laws and regulations for each country in which the organization operates
   • DInformation security resources available in each country in which the organization operates

   Show answer

   Answer: C

   Next question

8. Question 188 · 1243 in bank

   Which of the following should an information security manager perform FIRST when an organization's residual risk has increased?

   • AImplement security measures to reduce the risk.
   • BAssess the business impact.
   • CTransfer the risk to third parties.
   • DCommunicate the information to senior management.

   Show answer

   Answer: B

   Explanation

   Assess the impact and then inform management. What could you really tell them if don't know the implications of the new level of risk?

   Source: Adapted from community discussion — AaronS1990

   Next question

9. Question 189 · 1243 in bank

   Which of the following is the GREATEST benefit resulting from the introduction of data security standards for payment cards?

   • AIt helps achieve the holistic protection of information assets in the industry.
   • BIt deters hackers from committing crimes related to card payments.
   • CIt enables a wider range of more sophisticated payment methods.
   • DIt optimizes budget allocation for cybersecurity in each organization.

   Show answer

   Answer: A

   Next question

10. Question 190 · 1243 in bank

    Which of the following should an information security manager establish FIRST to ensure security-related activities are adequately monitored?

    • ARegular reviews of system logs
    • BAccountability for security functions
    • CProcedures for security assessments
    • DSchedules for internal audits

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 181. 1243 questions available.