CISM practice questions 791–800

1. Question 791 · 1243 in bank

   Which of the following is MOST useful to display on a dashboard to demonstrate security performance?

   • ANumber of hours spent per vulnerability remediated
   • BNumber of vulnerabilities detected over time
   • CSeverity of currently unremediated vulnerabilities
   • DAverage time to identify vulnerabilities

   Show answer

   Answer: C

   Explanation

   Proactive indicators (help us anticipate and prevent problems) are more useful that reactive ones (look back on consequences of past actions). No. of hours spent is reactive (hence less useful), whereas severity of unremediated vulnerabilities can reveal classification, prioritization and overall management of vulnerabilities, while helping us keep our eye on the ball.

   Source: Adapted from community discussion — CISSPST

   Next question

2. Question 792 · 1243 in bank

   Which of the following should be done FIRST when establishing an information security governance framework?

   • AGain an understanding of the business and cultural attributes.
   • BContract a third party to conduct an independent review of the program.
   • CConduct a cost-benefit analysis of the framework.
   • DEvaluate information security tools and skills relevant for the environment.

   Show answer

   Answer: A

   Next question

3. Question 793 · 1243 in bank

   Which of the following is the BEST approach to make strategic information security decisions?

   • AEstablish periodic senior management meetings.
   • BEstablish regular information security status reporting.
   • CEstablish an information security steering committee.
   • DEstablish business unit security working groups.

   Show answer

   Answer: C

   Next question

4. Question 794 · 1243 in bank

   Which type of incident response test is the MOST efficient way to verify that backup power generators are functioning?

   • AOperational full test
   • BSimulation failure test
   • CParallel recovery test
   • DFull interruption test

   Show answer

   Answer: C

   Explanation

   Parallel testing is the most effective way of testing as it does not hinders the production/ critical processes running in the org

   Source: Adapted from community discussion — Souvik124

   Next question

5. Question 795 · 1243 in bank

   Which of the following is the MOST important action to prepare for a ransomware attack?

   • ABack up data regularly and verify the integrity of backups.
   • BScan emails to detect threats and filter out executable files.
   • CConfigure access controls with least privilege in mind.
   • DExecute operating systems and programs in a virtualized environment.

   Show answer

   Answer: A

   Next question

6. Question 796 · 1243 in bank

   Which of the following should be the MAIN outcome from monitoring key performance indicators (KPIs) for a corporate security management program?

   • AA balanced scorecard
   • BAn effective security awareness program
   • CData for the organization to assess progress
   • DOptimal level of value delivery

   Show answer

   Answer: C

   Explanation

   C. Data for the organization to assess progress The MAIN outcome from monitoring key performance indicators (KPIs) for a corporate security management program should be to provide data for the organization to assess its progress. Monitoring KPIs allows the organization to track the effectiveness of its security measures, identify areas that may need improvement, and make informed decisions to enhance security. While the other options (A, B, and D) can be important components of a security management program, they are not the primary outcome of monitoring KPIs.

   Source: Adapted from community discussion — oluchecpoint

   Next question

7. Question 797 · 1243 in bank

   An organization is considering using a third party to host sensitive archived data. Which of the following is MOST important to verify before entering into the relationship?

   • AIndependent audits of the vendor’s operations are regularly conducted.
   • BThe vendor’s controls are in line with the organization’s security standards.
   • CThe encryption keys are not provided to the vendor.
   • DThe vendor’s data centers are in the same geographic region.

   Show answer

   Answer: B

   Explanation

   B. The vendor’s controls are in line with the organization’s security standards. When an organization is considering using a third party to host sensitive archived data, it is important to verify that the vendor's controls are in line with the organization's security standards. This includes reviewing the vendor's security policies, procedures, and technical controls to ensure that they meet or exceed the organization's own standards for data protection. This will help ensure that the organization's sensitive data is protected from unauthorized access, alteration, or destruction.

   Source: Adapted from community discussion — Broesweelies

   Next question

8. Question 798 · 1243 in bank

   When creating an incident response plan, which of the following is MOST important to include during the preparation phase of the plan’s life cycle?

   • ACommunication plan
   • BResponse procedures
   • CRisk management plan
   • DForensic analysis procedures

   Show answer

   Answer: A

   Explanation

   A. Communication plan When creating an incident response plan, it's important to include a communication plan during the preparation phase of the plan's life cycle. A communication plan outlines how the organization will communicate during an incident, who will be responsible for communicating, and what information will be communicated to different stakeholders. This is important to ensure that all stakeholders, including employees, customers, partners, and regulators, are informed and kept up-to-date on the incident and its impact. This can help to minimize the potential damage to the organization's reputation, and ensure that the incident is handled in a transparent and timely manner.

   Source: Adapted from community discussion — Broesweelies

   Next question

9. Question 799 · 1243 in bank

   What would be an information security manager's BEST recommendation upon learning that an existing contract with a third party does not clearly identify requirements for safeguarding the organization's critical data?

   • ACancel the outsourcing contract.
   • BTransfer the risk to the provider.
   • CCreate an addendum to the existing contract.
   • DInitiate an external audit of the provider's data center.

   Show answer

   Answer: C

   Explanation

   The Definition of an addendum is an item of additional material added at the end of a book or document, typically in order to correct, clarify, or supplement something. Seeing that this needs to be addressed, Option C is the only correct answer.

   Source: Adapted from community discussion — dark_3k03r

   Next question

10. Question 800 · 1243 in bank

    Which of the following is the BEST way to enhance training for incident response teams?

    • AConduct interviews with organizational units.
    • BEstablish incident key performance indicators (KPIs).
    • CParticipate in emergency response activities.
    • DPerform post-incident reviews.

    Show answer

    Answer: D

    Explanation

    D. Perform post-incident reviews. The BEST way to enhance training for incident response teams is to perform post-incident reviews. Post-incident reviews, also known as after-action reviews or lessons learned sessions, involve analyzing and evaluating the response to an incident once it has been resolved. This process allows the incident response team to reflect on their actions, identify strengths and weaknesses, and gather valuable insights for improving their performance in future incidents.

    Source: Adapted from community discussion — Jae_kes

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 791. 1243 questions available.