Question 31 · 1243 in bank
A security incident has been reported within an organization. When should an information security manager contact the information owner?
Show answer
Answer: C
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
A security incident has been reported within an organization. When should an information security manager contact the information owner?
Answer: C
An incident management team leader sends out a notification that the organization has successfully recovered from a cyberattack. Which of the following should be done NEXT?
Answer: C
securing and preserving digital evidence for analysis (Option A) is important, but it typically occurs earlier in the incident response process. Correct answer is C.
Source: Adapted from community discussion — SHERLOCKAWS
Which of the following defines the MOST comprehensive set of security requirements for a newly developed information system?
Answer: C
Baseline controls are applied for a group of IT systems. Since the question is asking about the most comprehensive controls, I would go for C, since a risk assessment specifically addresses a systems risk.
Source: Adapted from community discussion — Josef4CISM
Which of the following information security practices would BEST prevent a SQL injection attack?
Answer: C
Which of the following is a viable containment strategy for a distributed denial of service (DDoS) attack?
Answer: D
A viable containment strategy for a distributed denial of service (DDoS) attack is to D. redirect the attacker's traffic. Redirecting the attacker's traffic involves rerouting the malicious traffic away from the target servers or network infrastructure. This can be done by implementing techniques such as traffic scrubbing or utilizing specialized DDoS mitigation services. By redirecting the attacker's traffic, the impact on the targeted servers or network is minimized, allowing legitimate traffic to flow smoothly.
Source: Adapted from community discussion — koala_lay
In a cloud technology environment, which of the following would pose the GREATEST challenge to the investigation of security incidents?
Answer: B
CISM AIO 2nd - "Acquiring Additional Hardware" section gives a good chart (7-7 Table) on pro's and con's as to why this answer is correct given the options
Source: Adapted from community discussion — MSKid
A data discovery project uncovers an unclassified process document. Of the following, who is BEST suited to determine the classification?
Answer: A
Which of the following is MOST important to include in a post-incident report?
Answer: C
When creating an incident response plan, the triggers for the business continuity plan (BCP) MUST be based on:
Answer: C
An organization's information security strategy should be the PRIMARY input to which of the following?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 31. 1243 questions available.
Version 1.0.0. How we source questions