Question 641 · 1243 in bank
Which of the following is the BEST course of action when confidential information is inadvertently disseminated outside the organization?
Show answer
Answer: B
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following is the BEST course of action when confidential information is inadvertently disseminated outside the organization?
Answer: B
An organization is performing an annual review of its risk landscape. Which of the following anticipated changes will have the MOST significant impact on the information security strategy?
Answer: C
Which of the following provides the MOST assurance that a third-party hosting provider will be able to meet availability requirements?
Answer: D
SLA = Service Level Agreement-> commitment Right to audit -> right to inspect/check/verify the correctness. How do you know if the provider will pass the audit? Answer would be SLA. SLA is a commitment. Client does not care what it takes to make commitment realistic. Follows SLA or being penalized/prosecuted.
Source: Adapted from community discussion — Thavee
An organization permits the storage and use of its critical and sensitive information on employee-owned smartphones. Which of the following is the BEST security control?
Answer: D
The correct solution would be (D) as the organization should be able to wipe the device in case it is stolen or misplaced. A. Could cause potential legal issues B. Developing security awareness training would do nothing to control the situation but only make users aware of the situation. C. Requiring the backup of the organization s data by the user does not address the fact that a device may be stolen or misplaced.
Source: Adapted from community discussion — dark_3k03r
A spear phishing attack was used to trick a user into installing a Trojan onto a workstation. Which of the following would have been MOST effective in preventing this attack from succeeding?
Answer: A
Gonna go with A here. Both make assumptions - i.e.. application control, are we talking app whitelisting or blacklisting? Whitelisting would definitely block. For internet filter - for it to work successfully, the URL would have to be categorized as malicious.
Source: Adapted from community discussion — Gr3yGh0sT
Which of the following is the MOST effective method of preventing deliberate internal security breaches?
Answer: D
D. Screening prospective employees is the MOST effective method of preventing deliberate internal security breaches. This is because a thorough screening process can help to identify potential security risks before they are hired, such as a history of malicious or unethical behavior. Additionally, by conducting background checks, verifying credentials, and checking references, an organization can gain a better understanding of a candidate's qualifications and trustworthiness, which can help to reduce the risk of an internal security breach. Other methods such as firewalls, intrusion detection systems, and biometric security access control help to secure the perimeter and monitor for unauthorized access, but can't prevent a malicious insider who already has access to the systems.
Source: Adapted from community discussion — Broesweelies
An information security manager has been asked to provide regular status reports to senior management regarding the information security program. Which of the following would provide the MOST helpful information?
Answer: D
Which of the following would be the GREATEST threat posed by a distributed denial of service (DDoS) attack on a public-facing web server?
Answer: D
D. Prevention of authorized access The greatest threat posed by a distributed denial of service (DDoS) attack on a public-facing web server is the prevention of authorized access. DDoS attacks flood a server with an overwhelming volume of traffic or requests, causing it to become overwhelmed and unavailable to legitimate users. This means that authorized users will be unable to access the resources or services provided by the server, which can have significant consequences for businesses and organizations relying on the server for their operations
Source: Adapted from community discussion — oluchecpoint
Which of the following is the BEST indication of information security strategy alignment with the business?
Answer: D
Which of the following would BEST mitigate accidental data loss events?
Answer: C
I would say A. I initially thought C but it's talking about accidental data loss here. That to me says it's an accident such as leaving a laptop/USB on a train and so encryption would mitigate some loss. The thing that troubles me with that answer is data isn't just in the for of media. Regardless, i don't see how training mitigates erroneous data loss
Source: Adapted from community discussion — AaronS1990
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 641. 1243 questions available.
Version 1.0.0. How we source questions