CISM practice questions 241–250

1. Question 241 · 1243 in bank

   An intrusion prevention system (IPS) has reported a significant increase in the number of hacking attempts over the past month, though no systems have actually been compromised. Which of the following should the information security manager do FIRST?

   • ATune the IPS to address false positives.
   • BReport the increase in hacking attempts to senior management.
   • CValidate the events identified by the IPS.
   • DUpdate security awareness training.

   Show answer

   Answer: C

   Next question

2. Question 242 · 1243 in bank

   The likelihood of a successful intrusion is a function of:

   • Athreat and vulnerability levels.
   • Bdesign and redundancy of network perimeter controls.
   • Cconfiguration and maintenance of log monitoring system.
   • Dopportunity and asset value.

   Show answer

   Answer: A

   Next question

3. Question 243 · 1243 in bank

   Which of the following is the BEST evidence that senior management supports the information security program?

   • AThe information security manager reports to the chief risk officer (CRO)
   • BA reduction in information security costs
   • CConsistent enforcement of information security policies
   • DA high level of information security risk acceptance

   Show answer

   Answer: C

   Next question

4. Question 244 · 1243 in bank

   An information security manager discovers that the organization's new information security policy is not being followed across all departments. Which of the following should be of GREATEST concern to the information security manager?

   • ABusiness unit management has not emphasized the importance of the new policy.
   • BDifferent communication methods may be required for each business unit.
   • CThe wording of the policy is not tailored to the audience.
   • DThe corresponding controls are viewed as prohibitive to business operations.

   Show answer

   Answer: D

   Explanation

   If the new information security policy is not being followed across all departments, it may indicate that the corresponding controls are viewed as burdensome or restrictive to business operations. This means that the users and employees do not see the value in following the policy and controls, and therefore they do not adhere to them. This can create significant security risks, as the organization's sensitive data and systems may be left unprotected.

   Source: Adapted from community discussion — Broesweelies

   Next question

5. Question 245 · 1243 in bank

   During incident recovery, which of the following is the BEST approach to ensure the eradication of traces hidden by an attacker?

   • AReinstall the system from the original source.
   • BPerform continuous monitoring until validation is achieved.
   • CProhibit use of the account suspected to be compromised.
   • DConduct a forensic investigation to acquire evidence.

   Show answer

   Answer: A

   Next question

6. Question 246 · 1243 in bank

   Which of the following BEST enables the effectiveness of an information security training program for new employees?

   • ANew employees are required to acknowledge the information security policy.
   • BNew employees must complete a security assessment after training.
   • CInformation security training precedes all other onboarding training.
   • DThe training is specific to new employees' job functions.

   Show answer

   Answer: D

   Next question

7. Question 247 · 1243 in bank

   An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization's CEO in an attempt to commit wire transfer fraud. Which of the following is the BEST way to reduce the risk associated with this type of attack?

   • ATemporarily suspend wire transfers for the organization.
   • BProvide awareness training to staff responsible for wire transfers.
   • CDisable emails for staff responsible for wire transfers.
   • DProvide awareness training to the CEO for this type of phishing attack.

   Show answer

   Answer: B

   Next question

8. Question 248 · 1243 in bank

   Which of the following is the BEST indication of effective information security governance?

   • AComprehensive security policies reflect organizational objectives.
   • BInformation security is integrated into organizational processes.
   • CThe information security program follows industry best practices.
   • DAn information security risk register is maintained.

   Show answer

   Answer: B

   Next question

9. Question 249 · 1243 in bank

   A data loss prevention (DLP) tool has flagged personally identifiable information (PII) during transmission. Which of the following should the information security manager do FIRST?

   • AValidate the scope and impact with the business process owner.
   • BEscalate the issue to senior management.
   • CReview and validate the rules within the DLP system.
   • DInitiate the incident response plan.

   Show answer

   Answer: A

   Next question

10. Question 250 · 1243 in bank

    Which of the following is MOST likely to require an organization to update its business continuity plan (BCP)?

    • ASuccessful BCP testing results
    • BIncreases in information security risk trends
    • CMultiple changes in organizational leadership
    • DMajor changes in the business operating environment

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 241. 1243 questions available.