Question 751 · 1243 in bank
Which of the following should be an information security manager's MAIN concern if the same digital signing certificate is able to be used by two or more users?
Show answer
Answer: B
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following should be an information security manager's MAIN concern if the same digital signing certificate is able to be used by two or more users?
Answer: B
Signature based anti-malware controls are MOST effective against:
Answer: C
C. known threats. Signature-based anti-malware controls are designed to detect and block known threats. These controls use a database of signatures or patterns associated with known malware to identify and block malicious files or code. When a file or code matches a signature in the database, the anti-malware software can take appropriate action, such as quarantining or deleting the file. Poorly configured firewall rules (A) and reused virus code (B) are not directly related to the effectiveness of signature-based anti-malware controls. Firewall rules are network-level controls that regulate incoming and outgoing traffic, while reused virus code refers to the practice of using existing malicious code in new malware. However, signature-based anti-malware controls can complement firewall rules and help detect and block malware, including instances of reused virus code.
Source: Adapted from community discussion — koala_lay
Which of the following is the PRIMARY objective of a business impact analysis (BIA)?
Answer: B
A common drawback of email software packages that provide native encryption of messages is that the encryption:
Answer: B
According to ISACA, a common drawback of email software packages that provide native encryption of messages is that the encryption may not be compatible with other email systems. This can make it difficult to communicate securely with other organizations or individuals who use different email systems.
Source: Adapted from community discussion — mad68
Which of the following would be an information security manager's PRIMARY challenge when deploying a bring your own device (BYOD) mobile program in an enterprise?
Answer: C
n a BYOD program, employees use their personal mobile devices to access enterprise resources, such as email, corporate applications, and data. These devices may not be under the direct control of the enterprise, and therefore, they may not adhere to the same security standards and configurations as company-owned devices.
Source: Adapted from community discussion — mad68
Which of the following is the MOST important outcome of effective risk treatment?
Answer: A
The most important outcome of effective risk treatment is the elimination or reduction of risk to an acceptable level. This is accomplished by implementing appropriate controls and measures to mitigate the potential impact of identified risks. Other outcomes, such as implementation of corrective actions, timely reporting of incidents and reduced cost of acquiring controls, are important aspects of risk management, but they are ultimately secondary to achieving the primary goal of reducing or eliminating risk.
Source: Adapted from community discussion — Broesweelies
Which of the following is MOST important to the successful management of an information security program?
Answer: C
A newly hired information security manager discovers that the cleanup of accounts for terminated employees happens only once a year. Which of the following should be the information security manager’s FIRST course of action?
Answer: B
Risk Assessment: Performing a risk assessment is crucial in understanding the potential security risks and vulnerabilities associated with the current practice of cleaning up accounts for terminated employees only once a year. This step allows the manager to identify and quantify the risks associated with this practice, including the possibility of unauthorized access, data breaches, and compliance violations. While reporting the issue to senior management (Option C) is important, it should be done after conducting a risk assessment. Having concrete data on the risks involved will strengthen the manager's case when discussing the issue with senior management and seeking their support for changes.
Source: Adapted from community discussion — oluchecpoint
Which of the following BEST conveys minimum information security requirements to an organization in alignment with policies?
Answer: D
Standards convey minimum information security requirements to an organization in alignment with policies. Standards are a set of guidelines, protocols, and best practices that an organization must adhere to in order to meet a certain level of security. They are established by a recognized authority and can be mandatory or voluntary. Standards provide a framework for an organization to develop and implement their own security policies, procedures, and controls. Baselines, regulations, and procedures are also important components of an organization's security program, but standards provide the minimum requirements that must be met.
Source: Adapted from community discussion — Broesweelies
Which of the following security initiatives should be the FIRST step in helping an organization maintain compliance with privacy regulations?
Answer: A
A. Implementing a data classification framework. Implementing a data classification framework is essential for maintaining compliance with privacy regulations. It involves identifying and categorizing data based on its sensitivity and regulatory requirements. By classifying data, organizations can apply appropriate controls and protection measures, such as encryption or access restrictions, to ensure compliance with privacy regulations. Data classification provides a foundation for effective data management and allows organizations to prioritize their efforts in protecting sensitive information.
Source: Adapted from community discussion — mad68
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 751. 1243 questions available.
Version 1.0.0. How we source questions