Question 351 · 1243 in bank
Which of the following is MOST important to the successful implementation of an information security program?
Show answer
Answer: B
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following is MOST important to the successful implementation of an information security program?
Answer: B
Which of the following is the BEST way to strengthen the alignment of an information security program with business strategy?
Answer: A
Which of the following is necessary to determine what would constitute a disaster for an organization?
Answer: C
C. Risk analysis To determine what would constitute a disaster for an organization, it is necessary to conduct a risk analysis. This process involves identifying and evaluating potential threats to the organization's operations and assets, as well as assessing the impact of those threats. The result of this analysis is a comprehensive understanding of the risks facing the organization, including the likelihood of a particular threat occurring and the potential impact if it were to occur. This information is then used to prioritize risks and develop appropriate risk mitigation strategies, including disaster recovery and business continuity plans.
Source: Adapted from community discussion — Broesweelies
Management has announced the acquisition of a new company. The information security manager of the parent company is concerned that conflicting access rights may cause critical information to be exposed during the integration of the two companies. To BEST address this concern, the information security manager should:
Answer: D
The question does not state what to do FIRST, but how to BEST address the concern. So, in this case some consistent approach regarding access rights should be taken.
Source: Adapted from community discussion — DelTrotter
Which of the following metrics provides the BEST measurement of the effectiveness of a security awareness program?
Answer: D
The correct answer is D: D. The number of reported security incidents. The reason is that as more employees are aware of potential security incidents they will report more. Rationale: (A) Cost has nothing to do with the effectiveness of a program. (B) Th number can go up or down, this has less to with the awareness of the employees, but the effectiveness of the controls. (C) Meantime is great for measuring the response process but has little to do with the detection process which is the aim of a security awareness program.
Source: Adapted from community discussion — dark_3k03r
The ULTIMATE responsibility for ensuring the objectives of an information security framework are being met belongs to:
Answer: A
Which of the following is MOST likely to affect an organization's ability to respond to security incidents in a timely manner?
Answer: A
The "CISM Review Manual, 16th Edition eBook*" , section 4.2.20 states: "Lack of management buy-in and organizational consensus- Most challenges result from a lack of management buy-in..... When an incident occurs, the management response may not be provided as expected, thus hindering incident management efforts.
Source: Adapted from community discussion — mad68
After a server has been attacked, which of the following is the BEST course of action?
Answer: B
The best response is (B) Initiate the incident response process. Rationale: A. Isolate the system is part of the incident response process. In addition to isolate it also has detect and analyze. It has apparently been detected, but has the attack been analyzed for lateral movement? Has its full scope been understood? Without this isolation is premature. and as mentioned is a later phase of incident response. C. Conduct a security audit - A little late for this no? It also doesn't do anything to address the situation. D. Review vulnerability assessment. - A little late for this no? It also doesn't do anything to address the situation.
Source: Adapted from community discussion — dark_3k03r
In a multinational organization, local security regulations should be implemented over global security policy because:
Answer: D
In a multinational organization, local security regulations should take precedence because different countries may have specific laws and regulations regarding information security and data protection. Adhering to local regulations is crucial to ensure compliance with the legal requirements of each region in which the organization operates. This helps avoid legal and regulatory issues and ensures that the organization's security practices align with local laws. While options A, B, and C may be factors to consider in certain situations, the primary reason for implementing local security regulations over global security policy is the need to comply with the specific requirements of each locality.
Source: Adapted from community discussion — Viperhunter
An information security team is investigating an alleged breach of an organization's network. Which of the following would be the BEST single source of evidence to review?
Answer: B
B. Security information and event management (SIEM) tool. Accodring to ChatGPT: The BEST single source of evidence to review when investigating an alleged breach of an organization's network is the Security Information and Event Management (SIEM) tool. The SIEM tool collects and aggregates log data from various sources throughout the network, such as firewalls, intrusion detection systems, and servers. The data is then analyzed and correlated to identify potential security incidents or breaches.
Source: Adapted from community discussion — mad68
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 351. 1243 questions available.
Version 1.0.0. How we source questions