Question 201 · 1243 in bank
When introducing a new information asset, what is the MOST important responsibility of the asset owner?
Show answer
Answer: D
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
When introducing a new information asset, what is the MOST important responsibility of the asset owner?
Answer: D
When establishing an information security governance framework, it is MOST important for an information security manager to understand:
Answer: B
When updating the information security policy to accommodate a new regulation, the information security manager should FIRST:
Answer: D
Which of the following is the BEST way to align security and business strategies?
Answer: B
Which of the following should an information security manager do FIRST when developing a security framework?
Answer: D
When developing a framework, the security manager first needs to understand the current vs. the desired state. An asset inventory is part of the current state - therefore not completely wrong. But in order to define a security framework, the gap analysis must be conducted first.
Source: Adapted from community discussion — Josef4CISM
A Software as a Service (SaaS) application has been implemented to support a critical business process. Which of the following is MOST important to include within the service level agreement (SLA) to ensure timely response to incidents affecting the application?
Answer: C
Of the following, who is BEST positioned to perform a business impact analysis (BIA)?
Answer: B
B - Business understand their process and able to tell what is the impact level to their system in the event of compromised.
Source: Adapted from community discussion — Booict
Which of the following is the BEST indication of an effective disaster recovery planning process?
Answer: C
Which of the following provides the BEST input to determine the level of protection needed for an IT system?
Answer: B
During a security assessment, an information security manager finds a number of security patches were not installed on a server hosting a critical business application. The application owner did not approve the patch installation to avoid interrupting the application. Which of the following should be the information security manager's FIRST course of action?
Answer: C
Simple, in a real world, you talk to your colleagus first before esclation. Unless, you don't care the relationship at all, how possible?
Source: Adapted from community discussion — DASH_v
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 201. 1243 questions available.
Version 1.0.0. How we source questions