CISM practice questions 211–220

1. Question 211 · 1243 in bank

   Which of the following should be the FIRST consideration for an information security manager after a security incident has been confirmed?

   • ADeveloping incident reporting criteria
   • BExecuting containment procedures
   • CRestoring business operations
   • DDetermining the root cause

   Show answer

   Answer: B

   Next question

2. Question 212 · 1243 in bank

   Which of the following actions will BEST resolve the root cause of a cyber incident involving unauthorized network access due to a critical vulnerability on a web server?

   • AImproving the patching process
   • BLocking accounts with unauthorized access
   • CIsolating affected systems
   • DTerminating malicious network connections

   Show answer

   Answer: A

   Next question

3. Question 213 · 1243 in bank

   Following an unsuccessful denial of service (DoS) attack, identified weaknesses should be:

   • Anoted and re-examined later if similar weaknesses are found
   • Btracked and reported on until their final resolution
   • Cquickly resolved and eliminated regardless of cost
   • Ddocumented in security awareness programs

   Show answer

   Answer: B

   Next question

4. Question 214 · 1243 in bank

   Which of the following is an information security manager’s MOST important action during the third-party provider selection process?

   • ADetermining it the third party is sufficiently staffed
   • BPerforming a network penetration test
   • CAnalyzing the third party’s existing control environment
   • DConsulting with the third party’s clients

   Show answer

   Answer: C

   Next question

5. Question 215 · 1243 in bank

   Which of the following risk assessment findings for an online-only business should be given the HIGHEST priority to address availability concerns?

   • AThe back office system that processes payments to providers has slowed.
   • BThe web server for the online store was found to be vulnerable to distributed denial of service (DDoS) attacks.
   • CEmail authentication through a connector to a single sign-on (SSO) service has a history of failure.
   • DThe access point for the visitor WiFi network has several unpatched vulnerabilities.

   Show answer

   Answer: B

   Next question

6. Question 216 · 1243 in bank

   At which stage of business continuity planning is risk identification performed?

   • AImpact analysis
   • BStakeholder meeting
   • CDevelopment
   • DProject planning

   Show answer

   Answer: A

   Next question

7. Question 217 · 1243 in bank

   An information security team plans to strengthen authentication requirements for a customer-facing site, but there are concerns it will negatively impact the user experience. Which of the following is the information security manager's BEST course of action?

   • ARefer to industry best practices.
   • BQuantify the security risk to the business.
   • CProvide security awareness training to customers.
   • DAssess business impact against security risk.

   Show answer

   Answer: D

   Next question

8. Question 218 · 1243 in bank

   Which of the following is the PRIMARY reason for executive management to be involved in establishing an enterprise’s security management framework?

   • ATo determine the desired state of enterprise security
   • BTo satisfy auditors’ recommendations for enterprise security
   • CTo ensure industry best practices for enterprise security are followed
   • DTo establish the minimum level of controls needed

   Show answer

   Answer: A

   Next question

9. Question 219 · 1243 in bank

   Which of the following is MOST important for an information security manager to consider when determining whether data should be stored?

   • AType and nature of data
   • BBusiness requirements
   • CData storage limitations
   • DData protection regulations

   Show answer

   Answer: B

   Next question

10. Question 220 · 1243 in bank

    A business unit recently integrated the organization’s new strong password policy into its business application which requires users to reset passwords every 30 days. The help desk is now flooded with password reset requests. Which of the following is the information security manager’s BEST course of action to address this situation?

    • AConduct a business impact analysis (BIA)
    • BProvide end-user training
    • CEscalate to senior management
    • DContinue to enforce the policy

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 211. 1243 questions available.