Question 61 · 1243 in bank
Which of the following is the MOST effective control to prevent proliferation of shadow IT?
Show answer
Answer: A
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following is the MOST effective control to prevent proliferation of shadow IT?
Answer: A
Which of the following is the MOST important driver when developing an effective information security strategy?
Answer: C
Which of the following is MOST important for the improvement of a business continuity plan (BCP)?
Answer: D
Which of the following is MOST important to consider when choosing a shared alternate location for computing facilities?
Answer: D
A financial institution has identified a high risk of fraud within its credit department. Which of the following information security controls will BEST reduce the risk of fraud?
Answer: B
An employee clicked on a malicious link in an email that resulted in compromising company data. What is the BEST way to mitigate this risk in the future?
Answer: D
The business value of an information asset is derived from:
Answer: B
Which of the following is the BEST indicator of the maturity level of a vendor risk management process?
Answer: B
Which of the following is the BEST way for an information security manager to justify ongoing annual maintenance fees associated with an intrusion prevention system (IPS)?
Answer: A
A. Establish and present appropriate metrics that track performance. The best way for an information security manager to justify ongoing annual maintenance fees associated with an intrusion prevention system (IPS) is to establish and present appropriate metrics that track the system's performance. This approach demonstrates the tangible value of the IPS and its effectiveness in protecting the organization's network and data. By using metrics related to the system's performance, such as the number of detected and blocked intrusion attempts, reduction in security incidents, or the cost savings resulting from prevented breaches, the manager can provide concrete evidence of the IPS's impact on security.
Source: Adapted from community discussion — oluchecpoint
An international organization with remote branches is implementing a corporate security policy for managing personally identifiable information (PII). Which of the following should be the information security manager's MAIN concern?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 61. 1243 questions available.
Version 1.0.0. How we source questions