CISM practice questions 221–230

1. Question 221 · 1243 in bank

   Which of the following is the MOST important consideration in a bring your own device (BYOD) program to protect company data in the event of a loss?

   • AThe ability to remotely locate devices
   • BThe ability to centrally manage devices
   • CThe ability to restrict unapproved applications
   • DThe ability to classify types of devices

   Show answer

   Answer: B

   Explanation

   Centrally managing devices in a BYOD program allows the organization to enforce security policies, apply updates, monitor compliance, and take action in case of a security incident. This includes the ability to remotely wipe or disable devices to prevent unauthorized access to company data in the event of a loss or theft. While the ability to remotely locate devices (option A), the ability to restrict unapproved applications (option C), and the ability to classify types of devices (option D) are also important considerations, central management provides a comprehensive and proactive approach to maintaining control over devices and ensuring the security of company data on those devices.

   Source: Adapted from community discussion — Viperhunter

   Next question

2. Question 222 · 1243 in bank

   Which of the following BEST indicates an effective vulnerability management program?

   • ASecurity incidents are reported in a timely manner.
   • BThreats are identified accurately.
   • CControls are managed proactively.
   • DRisks are managed within acceptable limits.

   Show answer

   Answer: D

   Explanation

   "Vulnerability management is the process of systematically and continuously finding weaknesses in an entity's security procedures, systems or networks and taking corrective action. The ultimate goal of vulnerability management is to keep risk at or below the organization's risk tolerance level." - CISM Review Manual, 15th Edition, 2019, page 286.

   Source: Adapted from community discussion — [Removed]

   Next question

3. Question 223 · 1243 in bank

   Which of the following is the MOST important objective when planning an incident response program?

   • AMinimizing business impact
   • BManaging resources
   • CRecovering from a disaster
   • DEnsuring IT resiliency

   Show answer

   Answer: A

   Next question

4. Question 224 · 1243 in bank

   Which of the following considerations is MOST important when selecting a third-party intrusion detection system (IDS) vendor?

   • AThe vendor’s proposal aligns with the objectives of the organization
   • BThe vendor’s proposal allows for contract modification during technology refresh cycles
   • CThe vendor’s proposal requires the provider to have a business continuity plan (BCP)
   • DThe vendor’s proposal allows for escrow in the event the third party goes out of business

   Show answer

   Answer: A

   Next question

5. Question 225 · 1243 in bank

   A financial institution is planning to develop a new mobile application. Which of the following is the BEST time to begin assessments of the application’s security compliance?

   • ADuring user acceptance testing (UAT)
   • BDuring regulatory review
   • CDuring the design phase
   • DDuring static code analysis

   Show answer

   Answer: C

   Next question

6. Question 226 · 1243 in bank

   When considering a new security initiative, which of the following should be done prior to the development of a business case?

   • AConduct a risk assessment
   • BConduct a benchmarking exercise
   • CPerform a cost-benefit analysis
   • DIdentify resource requirements

   Show answer

   Answer: A

   Explanation

   1 step is a risk assessment; then on the business case, you need to do a risk cost analysis after you analyze the risks.

   Source: Adapted from community discussion — Pichon

   Next question

7. Question 227 · 1243 in bank

   Which of the following BEST demonstrates the potential for successful business continuity in the event of a disaster?

   • ATabletop exercises
   • BAwareness training assessments
   • CDisaster recovery tests
   • DChecklist reviews

   Show answer

   Answer: C

   Explanation

   Business continuity, DR as the tests to ensure critical business operations are successfuly restore. These tests crucial to identify potential bottlenecks and improve the BCP documentation if needed

   Source: Adapted from community discussion — Pichon

   Next question

8. Question 228 · 1243 in bank

   Which of the following is an essential practice for workstations used to conduct a forensic investigation?

   • AA documented chain of custody log is kept for the workstations
   • BThe workstations are only accessed by members of the forensics team
   • COnly forensics-related software is installed on the workstations
   • DThe workstations are backed up and hardened on a regular basis

   Show answer

   Answer: B

   Explanation

   The answer is B, the chain of custody is not essential for the machine that is used for conducting the forensic investigation. The chain of custody applies to the evidence you're handling. Therefore, controlling access to the workstation is more important and ensure security and integrity

   Source: Adapted from community discussion — HN2025

   Next question

9. Question 229 · 1243 in bank

   Which of the following components of the risk assessment process should be reviewed FIRST to gain an understanding of the scope of an emerging risk within an organization?

   • ARisk categorization
   • BAsset identification
   • CControl evaluation
   • DRisk treatment

   Show answer

   Answer: B

   Next question

10. Question 230 · 1243 in bank

    An information security manager has been tasked with implementing a security solution that provides insight into potential security incidents Which of the following BEST supports this activity?

    • AIntrusion detection system (IDS)
    • BSecurity information and event management (SIEM)
    • CData loss prevention system (DLP)
    • DUser behavior analytics

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 221. 1243 questions available.