Question 191 · 1243 in bank
Which of the following is the BEST approach for data owners to use when defining access privileges for users?
Show answer
Answer: D
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following is the BEST approach for data owners to use when defining access privileges for users?
Answer: D
Which of the following is the BEST control to protect customer personal information that is stored in the cloud?
Answer: A
Which of the following is MOST important to include in an enterprise information security policy?
Answer: B
An information security manager wants to upgrade an organization's workstations to a new operating system version. Which of the following would be MOST helpful to gain senior management support for the upgrade?
Answer: D
Which of the following is MOST important to define when creating information security management metrics?
Answer: B
A PRIMARY benefit of adopting an information security framework is that it provides:
Answer: A
It is MOST important that risk owners understand they are accountable for:
Answer: D
Which of the following is MOST important to include in security incident escalation procedures?
Answer: D
Which of the following is the PRIMARY reason for an information security manager to present the business case for an information security initiative to senior management?
Answer: A
The primary objective of presenting a business case for an information security initiative to senior management is to provide them with the necessary information to make an informed decision about whether or not to invest in the initiative. This includes information about the costs, benefits, and risks associated with the initiative, as well as an analysis of how the initiative aligns with the organization's overall business objectives. Representing stakeholders who will benefit from enhancements in information security (option B) is one of the important aspect when presenting the business case but not the primary reason. Providing management with the status of the information security program (option C) and demonstrating to management the due diligence involved with selecting the solution (option D) are also important aspects of presenting a business case, but they are not the primary reason.
Source: Adapted from community discussion — Broesweelies
An organization has implemented a new email filter to mitigate risk associated with its email system. Who is BEST suited to be the control owner?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 191. 1243 questions available.
Version 1.0.0. How we source questions