Question 541 · 1243 in bank
Which of the following is an information security manager's BEST course of action to gain approval for investment in a technical control?
Show answer
Answer: B
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following is an information security manager's BEST course of action to gain approval for investment in a technical control?
Answer: B
Which of the following is an important criterion for developing effective key risk indicators (KRIs) to monitor information security risk?
Answer: D
D. The indicator should possess a high correlation with a specific risk and be measured on a regular basis Developing effective Key Risk Indicators (KRIs) for monitoring information security risk involves selecting indicators that are closely tied to specific risks and measuring them regularly. This approach allows organizations to proactively identify and respond to emerging risks and security threats. Options A, B, and C do not emphasize the importance of specificity, regular measurement, and correlation with risks, which are critical aspects of effective KRIs in the context of information security
Source: Adapted from community discussion — oluchecpoint
A health care organization's information security manager is notified of a possible breach of critical patient data involving a large volume of records. What should the information security manager do FIRST?
Answer: C
Which of the following presents the GREATEST risk associated with the use of an automated security information and event management (SIEM) system?
Answer: B
A test result that incorrectly indicates that the condition being tested for is not present when, in fact, the condition is actually present. For example, a false-negative HIV test indicates that a person does not have HIV when the person actually does have HIV.
Source: Adapted from community discussion — dedfef
Of the following, who should the security manager consult FIRST when determining the severity level of a security incident involving a third-party vendor?
Answer: D
D. Business process owners should be the first person the security manager should consult when determining the severity level of a security incident involving a third-party vendor. Business process owners have a good understanding of the criticality of the business process that the vendor supports and the impact of the security incident on the process. Risk manager, IT process owners and Business partners can also provide important information, but business process owners should be the first point of contact.
Source: Adapted from community discussion — Broesweelies
Recommendations for enterprise investment in security technology should be PRIMARILY based on:
Answer: B
B. alignment with business needs should be the primary basis for recommendations for enterprise investment in security technology. The security technology should be in line with the organization's goals and objectives, and should support and enhance the organization's ability to protect its assets and meet its compliance requirements.
Source: Adapted from community discussion — Broesweelies
What is the PRIMARY purpose of an unannounced disaster recovery exercise?
Answer: B
Unannounced disaster recovery exercises are designed to test the readiness and response of personnel to an unexpected disaster or disruption. By conducting the exercise without prior notification, organizations can assess the effectiveness of their disaster recovery plans, the ability of personnel to react promptly and appropriately, and the overall resilience of the organization's systems and processes in the face of unexpected events. While aspects like providing metrics to senior management (option A), assessing service level agreements (SLAs) (option C), and estimating the recovery time objective (RTO) (option D) may be secondary benefits, the primary focus is on evaluating personnel responses and the practical effectiveness of the disaster recovery plans during unanticipated scenarios.
Source: Adapted from community discussion — Viperhunter
When implementing a security policy for an organization handling personally identifiable information (PII), the MOST important objective should be:
Answer: B
An information security manager has received confirmation that the organization's e-commerce website was breached, exposing customer information. What should be done FIRST?
Answer: C
Which of the following would be MOST useful when illustrating to senior management the status of a recently implemented information security governance framework?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 541. 1243 questions available.
Version 1.0.0. How we source questions