Question 631 · 1243 in bank
Which of the following tools provides an incident response team with the GREATEST insight into insider threat activity across multiple systems?
Show answer
Answer: C
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following tools provides an incident response team with the GREATEST insight into insider threat activity across multiple systems?
Answer: C
Conducting a business impact analysis (BIA) BEST helps to identify:
Answer: D
An employee who denies accusations of downloading inappropriate material to an organizational device has been discharged. In support of the disciplinary action the collection of legal evidence is required. Which of the following is the information security manager's BEST recommendation?
Answer: B
An information security manager wants to implement a security information and event management (SIEM) system that will aggregate log data from all systems that control perimeter access. Which of the following would BEST support the business case for this initiative to senior management?
Answer: C
C. Independent evidence of a SIEM system's ability to reduce risk ISACA places emphasis on the importance of evidence-based decision-making and demonstrating the ability of security initiatives to reduce risk. Providing independent evidence of a SIEM system's effectiveness in reducing risk would be a strong argument to support the business case for implementing such a system. This evidence could include reports, studies, or assessments from trusted sources that highlight the positive impact of SIEM systems in enhancing security and mitigating threats.
Source: Adapted from community discussion — mad68
Which of the following BEST protects against phishing attacks?
Answer: A
I think the wording for option A is off. If they would have calles it "User Awareness Training" than I would have picked A instead of B. "Security Strategy Training" sounds off and I did not hear it before.
Source: Adapted from community discussion — Josef4CISM
The PRIMARY objective of performing a post-incident review is to:
Answer: A
the primary purpose of a post-incident review is indeed to identify control improvements and lessons learned, which may involve conducting a root cause analysis as part of the overall process. The focus is on identifying areas for improvement in controls, processes, and procedures to prevent similar incidents from occurring in the future and to enhance the organization's overall security posture.
Source: Adapted from community discussion — wello
In a call center, the BEST reason to conduct a social engineering exercise is to:
Answer: D
You provide training to the call center staff so that they are not susceptible to phishing and similar targeted attacks.
Source: Adapted from community discussion — ddharia94
The PRIMARY purpose of a penetration test is to:
Answer: D
D. identify vulnerabilities at a particular point in time The primary purpose of a penetration test, also known as a pen test or ethical hacking, is to identify vulnerabilities in a computer system, network, or application at a specific point in time. Penetration testing involves simulating real-world attacks to discover weaknesses in security defenses. It helps organizations understand their current security posture and assess the effectiveness of their security measures.
Source: Adapted from community discussion — oluchecpoint
An information security policy was amended recently to support an organization's new information security strategy. Which of the following should be the information security manager's NEXT step?
Answer: B
A. Evaluate the alignment with business strategy Before making any further changes or updates, it's essential to ensure that the recently amended information security policy aligns with the organization's new information security strategy and, more importantly, with the overall business strategy. This alignment ensures that information security efforts are in sync with the organization's goals and objectives. Once alignment is confirmed, the information security manager can proceed with other tasks.
Source: Adapted from community discussion — oluchecpoint
Which of the following needs to be established FIRST in order to categorize data properly?
Answer: C
Strange question...however, I'd go with C here. My best guess and rationale is the following: Categorization is based on the attributes and properties of entities in dataset, whereas Classification is based on the business requirements. In other words, you need a classification framework (a basic structure underlying a system) to figure out the business part and based on that you categorize data.
Source: Adapted from community discussion — AlexJacobson
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 631. 1243 questions available.
Version 1.0.0. How we source questions