CISM practice questions 251–260

1. Question 251 · 1243 in bank

   Which of the following is the GREATEST benefit of performing a tabletop exercise of the business continuity plan (BCP)?

   • AIt helps in assessing the availability of compatible backup hardware.
   • BIt identifies appropriate follow-up work to address shortcomings in the plan.
   • CIt provides a low-cost method of assessing the BCP’s completeness.
   • DIt allows for greater participation and planning from the business side.

   Show answer

   Answer: C

   Next question

2. Question 252 · 1243 in bank

   Which of the following is the BEST approach for encouraging business units to assume their roles and responsibilities in an information security program?

   • AEngage an independent security audit.
   • BPerform a risk assessment.
   • CConduct an awareness program for senior management.
   • DDevelop controls and countermeasures.

   Show answer

   Answer: C

   Explanation

   Weird wording - but I guess the question asks about how to create awareness for information security. You can do so by creating awareness starting from the senior management and continue to lower organizational levels.

   Source: Adapted from community discussion — Josef4CISM

   Next question

3. Question 253 · 1243 in bank

   Which of the following is MOST influential in driving the effectiveness of an information security program?

   • APolicies and standards
   • BOrganizational risk appetite
   • CInformation security metrics
   • DOrganizational culture

   Show answer

   Answer: D

   Next question

4. Question 254 · 1243 in bank

   The MAIN reason for having senior management review and approve an information security strategic plan is to ensure:

   • Acompliance with legal and regulatory requirements.
   • Bthe plan aligns with corporate governance.
   • Cstaff participation in information security efforts.
   • Dthe organization has the required funds to implement the plan.

   Show answer

   Answer: B

   Next question

5. Question 255 · 1243 in bank

   Which of the following is the GREATEST risk associated with a poorly trained incident response team responding to a major incident?

   • ASeparation of duty violations
   • BLoss of confidential information
   • CEvidence contamination
   • DFailure to escalate to senior management

   Show answer

   Answer: C

   Next question

6. Question 256 · 1243 in bank

   Which of the following is the PRIMARY preventive method to mitigate risks associated with privileged accounts?

   • AEliminate privileged accounts.
   • BPerform periodic certification of access to privileged accounts.
   • CProvide privileged account access only to users who need it.
   • DFrequently monitor activities on privileged accounts.

   Show answer

   Answer: C

   Next question

7. Question 257 · 1243 in bank

   Which of the following BEST enables an incident response team to determine appropriate actions during an initial investigation?

   • ATechnical capabilities of the team
   • BFeedback from affected departments
   • CHistorical data from past incidents
   • DProcedures for incident triage

   Show answer

   Answer: D

   Next question

8. Question 258 · 1243 in bank

   An organization’s service desk has reported that a PC is displaying a message with the phrase "your personal files are encrypted." Which of the following should be done FIRST?

   • AAnalyze the compromised PC to determine the root cause.
   • BIsolate the compromised PC from the network.
   • CMeet with the security team to identify related assets.
   • DUpdate all security endpoints to the most current versions.

   Show answer

   Answer: B

   Next question

9. Question 259 · 1243 in bank

   When multiple Internet intrusions on a server are detected, the PRIMARY concern of the information security manager should be to ensure:

   • Athe incident is reported to senior management.
   • Bthe integrity of evidence is preserved.
   • Cthe server is unplugged from power.
   • Dforensic investigation software is loaded on the server.

   Show answer

   Answer: B

   Explanation

   B. Preserving the integrity of evidence is crucial when dealing with an intrusion because it ensures that any subsequent investigation, whether internal or legal, is based on accurate and untampered data. Maintaining evidence integrity allows the organization to analyze the attack, understand the scope, and potentially use the findings in court if necessary.

   Source: Adapted from community discussion — Raj91188

   Next question

10. Question 260 · 1243 in bank

    Which of the following groups is MOST important to involve in the development of information security procedures?

    • AAudit management
    • BSenior management
    • CEnd users
    • DOperational units

    Show answer

    Answer: D

    Explanation

    D. Operational units are the groups that will be directly implementing and following the information security procedures on a daily basis. Their involvement ensures that the procedures are practical, relevant to the specific operations of the organization, and that they integrate smoothly into existing workflows. It also helps foster buy-in and compliance from those who will be most affected by the procedures.

    Source: Adapted from community discussion — Raj91188

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 251. 1243 questions available.