CISM practice questions 721–730

1. Question 721 · 1243 in bank

   When developing security processes for handling credit card data on the business unit's information system, the information security manager should FIRST:

   • Aensure that systems that handle credit card data are segmented.
   • Breview industry best practices for handling secure payments.
   • Censure alignment with industry encryption standards.
   • Dreview corporate policies regarding credit card information.

   Show answer

   Answer: D

   Explanation

   The information security manager FIRST review corporate policies regarding credit card information. This step is crucial as it sets the foundation for security processes within the organization. By understanding and adhering to the corporate policies, the information security manager can ensure that the handling of credit card data aligns with the organization's guidelines and compliance requirements. This step provides a framework for implementing appropriate security measures and helps address any potential gaps or issues in the existing policies. Once this foundation is established, the information security manager can then proceed to the other options mentioned, such as ensuring systems are segmented, reviewing industry best practices, and ensuring alignment with encryption standards.

   Source: Adapted from community discussion — koala_lay

   Next question

2. Question 722 · 1243 in bank

   What is the PRIMARY objective of information security involvement in the change management process?

   • ATo narrow the threat landscape
   • BTo ensure changes are not applied without prior authorization
   • CTo reduce the likelihood of control failure
   • DTo meet obligations for regulatory and legal compliance

   Show answer

   Answer: C

   Explanation

   I am split between B and C but going with C. Making sure changes are not implemented without authorization is the the primary purpose of the whole change management process and everyone involved. The question specifically asks what the PRIMARY objective of IT security is in the process and to me that is not necessarily about work authorization but making sure the behavior of the controls we have in place are not influenced by the change.

   Source: Adapted from community discussion — Dravidian

   Next question

3. Question 723 · 1243 in bank

   The MOST important reason for an information security manager to be involved in the change management process is to ensure that:

   • Asecurity controls drive technology changes.
   • Brisks have been evaluated.
   • Csecurity controls are updated regularly.
   • Dpotential vulnerabilities are identified.

   Show answer

   Answer: B

   Explanation

   Repeat after me..."Change equals risk". Having said that, that is the reason why infosec would want to manage CAB meetings, to keep the tech clowns in check.

   Source: Adapted from community discussion — CarlLimps

   Next question

4. Question 724 · 1243 in bank

   Which of the following is MOST likely to trigger an update and revision of information security policies?

   • AEngagement with a new service provider
   • BReplacement of the information security manager
   • CAttainment of business process maturity
   • DChanges in the organization's risk appetite

   Show answer

   Answer: D

   Explanation

   Policies are set above the Sec Manager, so to change them would need to be CISO or Sec Committee, changes in the business risk appetite could impact policies, I will stick with D

   Source: Adapted from community discussion — Ziggybooboo

   Next question

5. Question 725 · 1243 in bank

   A small organization with limited budget hires a new information security manager who finds the same IT staff member is assigned the responsibility of system administrator, security administrator, database administrator, and application administrator. What is the manager's BEST course of action?

   • AFormally document IT administrator activities.
   • BAutomate user provisioning activities.
   • CMaintain strict control over user provisioning activities.
   • DImplement monitoring of IT administrator activities.

   Show answer

   Answer: D

   Explanation

   D. Implement monitoring of IT administrator activities: This is the most appropriate initial step in this scenario. By monitoring IT administrator activities, the security manager can gain insights into how the responsibilities are being managed and whether there are any security risks or conflicts of interest in these roles. It allows the manager to identify any potential issues and develop a more comprehensive plan for addressing them.

   Source: Adapted from community discussion — oluchecpoint

   Next question

6. Question 726 · 1243 in bank

   Which of the following should an information security manager do FIRST when assessing conflicting requirements between the global organization's security standards and local regulations?

   • AConduct a gap analysis against local regulations.
   • BPerform a cost-benefit analysis of compliance.
   • CCreate a local version of the organizational standards.
   • DPrioritize the organizational standards over local regulations.

   Show answer

   Answer: A

   Explanation

   This step is crucial because it helps the information security manager understand the specific areas where conflicts or gaps exist. Once the gaps are identified, the manager can then proceed with further actions, such as evaluating the impact, determining the best course of action, and potentially involving relevant stakeholders in decision-making.

   Source: Adapted from community discussion — oluchecpoint

   Next question

7. Question 727 · 1243 in bank

   Which of the following is the BEST method to reduce the risk of an information security breach due to spear phishing?

   • AImplementing a vulnerability management program
   • BDeploying an intrusion protection system (IPS)
   • CEstablishing a company-wide information security awareness plan
   • DReviewing log files daily to identify any suspicious activity

   Show answer

   Answer: C

   Explanation

   C. Establishing a company-wide information security awareness plan. Spear phishing attacks often target individuals within an organization by using personalized and convincing messages. These attacks can be challenging to prevent solely through technical means like vulnerability management (A), intrusion protection systems (B), or reviewing log files (D).

   Source: Adapted from community discussion — oluchecpoint

   Next question

8. Question 728 · 1243 in bank

   A desktop computer is being used to perpetrate a fraud, and data on the machine must be secured for evidence. Which of the following should be done FIRST?

   • AEncrypt the content of the hard drive using a strong algorithm.
   • BObtain a hash of the desktop computer's internal hard drive.
   • CCopy the data on the computer to an external hard drive.
   • DCapture a forensic image of the computer.

   Show answer

   Answer: B

   Explanation

   Phases in a cyber forensic procedure: - Identification: Determining which evidence is required for the purpose. - Preservation: Deciding how to maintain the integrity and security of extracted evidence. - Analysis: Understanding the insights the information does (and does not) provide. - Documentation. ... - Presentation. So apparently, you calculate the hash first, before you touch anything. In reality, imaging software usually does this (calculates hash value) in the process of creating a bit-for-bit copy of the source.

   Source: Adapted from community discussion — AlexJacobson

   Next question

9. Question 729 · 1243 in bank

   The PRIMARY purpose of an information security governance framework is to ensure that the information security strategy is an extension of:

   • Aorganizational strategies.
   • Binformation technology strategies.
   • Cformal enterprise architecture.
   • Dapproved business cases.

   Show answer

   Answer: A

   Next question

10. Question 730 · 1243 in bank

    Which of the following is the MOST important consideration for a global organization that is designing an information security awareness program?

    • ANational regulations
    • BProgram costs
    • CCultural backgrounds
    • DLocal languages

    Show answer

    Answer: C

    Explanation

    Cultural backgrounds would be the most important consideration for a global organization designing an information security awareness program. Cultural differences in attitudes towards privacy and security can have a significant impact on the success of the program. For example, certain cultures may place a higher value on privacy and may be more resistant to certain types of security measures. Understanding and addressing these cultural differences is crucial to the success of the program.

    Source: Adapted from community discussion — Broesweelies

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 721. 1243 questions available.