Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following is MOST important for the information security manager to confirm when reviewing an incident response plan?
Answer: B
IRP fundamental are to identifying the incident, containing it, eradicating the threat, and recovering from the incident. To indentify, best follow BIA for the critical resourcfes. Communication channel is also important.
Source: Adapted from community discussion — afoo1314
Unintentional behavior by an employee caused a major data loss incident. Which of the following is the BEST way for the information security manager to prevent recurrence within the organization?
Answer: A
An organization has experienced multiple instances of privileged users misusing their access. Which of the following processes would be MOST helpful in identifying such violations?
Answer: D
A log review is the process of analyzing system and security logs to identify potential security incidents. This process can reveal patterns of suspicious activity, such as a privileged user accessing sensitive data that they shouldn't have access to, or making changes to systems that they shouldn't be able to make. By reviewing the logs, the organization can identify violations of security policies and procedures, detect unusual or suspicious activity, and trace the activity back to the individual who performed it.
Source: Adapted from community discussion — Broesweelies
Exceptions to a security policy should be approved based PRIMARILY on:
Answer: B
When developing a business case for a new security initiative, an information security manager should FIRST:
Answer: D
A proposal designed to gain buy-in from senior management for a new security project will be MOST effective if it includes:
Answer: D
Which of the following is MOST important for an information security steering committee to ensure?
Answer: B
An organization experienced a breach which was successfully contained and remediated. Based on industry regulations, the breach needs to be communicated externally. What should the information security manager do NEXT?
Answer: B
Which of the following is the BEST defense against a brute force attack?
Answer: B
Which of the following is MOST important to verify during a test of an organization's incident response process?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 231. 1243 questions available.
Version 1.0.0. How we source questions