CISM practice questions 811–820

1. Question 811 · 1243 in bank

   An information security manager wants to improve the ability to identify changes in risk levels affecting the organization's systems. Which of the following is the BEST method to achieve this objective?

   • APerforming business impact analyses (BIA)
   • BMonitoring key goal indicators (KGIs)
   • CMonitoring key risk indicators (KRIs)
   • DUpdating the risk register

   Show answer

   Answer: C

   Explanation

   Key risk indicators (KRIs) are specific metrics or indicators that provide early warnings of potential changes in the risk landscape. Monitoring KRIs helps organizations proactively identify shifts in risk levels and take timely actions to manage and mitigate emerging risks. KRIs are designed to give insight into the likelihood or impact of risk events before they occur, enabling a more proactive risk management approach. While performing business impact analyses (BIA) (option A), monitoring key goal indicators (KGIs) (option B), and updating the risk register (option D) are important activities in risk management, monitoring key risk indicators is particularly focused on identifying changes in risk levels as they happen.

   Source: Adapted from community discussion — Viperhunter

   Next question

2. Question 812 · 1243 in bank

   An organization involved in e-commerce activities operating from its home country opened a new office in another country with stringent security laws. In this scenario, the overall security strategy should be based on:

   • Arisk assessment results.
   • Binternational security standards.
   • Cthe most stringent requirements.
   • Dthe security organization structure.

   Show answer

   Answer: C

   Explanation

   In this scenario, the overall security strategy should be based on the most stringent requirements, which means complying with the security laws and regulations of the country where the new office is located.

   Source: Adapted from community discussion — Souvik124

   Next question

3. Question 813 · 1243 in bank

   An information security manager developing an incident response plan MUST ensure it includes:

   • Acritical infrastructure diagrams.
   • Ba business impact analysis (BIA).
   • Ccriteria for escalation.
   • Dan inventory of critical data.

   Show answer

   Answer: C

   Next question

4. Question 814 · 1243 in bank

   Which of the following is the MOST effective way to help staff members understand their responsibilities for information security?

   • ARequire staff to sign confidentiality agreements.
   • BRequire staff to participate in information security awareness training.
   • CCommunicate disciplinary processes for policy violations.
   • DInclude information security responsibilities in job descriptions.

   Show answer

   Answer: B

   Explanation

   B. Require staff to participate in information security awareness training. While the other options (A, C, and D) can be important components of an organization's information security program, providing staff with information security awareness training is generally the most effective method for ensuring that they understand their responsibilities and the importance of information security. Training helps employees learn about various security threats, best practices, and how to recognize and respond to security risks. It also helps create a security-conscious culture within the organization.

   Source: Adapted from community discussion — oluchecpoint

   Next question

5. Question 815 · 1243 in bank

   Security program development is PRIMARILY driven by which of the following?

   • ARegulatory requirements
   • BBusiness strategy
   • CRisk appetite
   • DAvailable resources

   Show answer

   Answer: B

   Explanation

   Security program development is primarily driven by the organization's business strategy. The organization's business strategy defines its goals and objectives, and the security program must be designed to support those goals and objectives.

   Source: Adapted from community discussion — Gr3yGh0sT

   Next question

6. Question 816 · 1243 in bank

   An organization has identified a risk scenario that has low impact to the organization but is very costly to mitigate. Which risk treatment option is MOST appropriate in this situation?

   • ATransfer
   • BAcceptance
   • CMitigation
   • DAvoidance

   Show answer

   Answer: B

   Explanation

   B. If the risk's impact is low and it's expensive to mitigate, it may be more reasonable for the organization to accept the risk rather than incurring high costs for mitigation.

   Source: Adapted from community discussion — Kunzle

   Next question

7. Question 817 · 1243 in bank

   Prior to conducting a forensic examination, an information security manager should:

   • Aboot the original hard disk on a clean system.
   • Bcreate an image of the original data on new media.
   • Cduplicate data from the backup media.
   • Dshut down and relocate the server.

   Show answer

   Answer: B

   Next question

8. Question 818 · 1243 in bank

   The fundamental purpose of establishing security metrics is to:

   • Aadopt security best practices.
   • Bestablish security benchmarks.
   • Cprovide feedback on control effectiveness.
   • Dincrease return on investment (ROI).

   Show answer

   Answer: C

   Explanation

   C. This hits at the heart of why metrics are established. Metrics measure the effectiveness of various controls, processes, and practices in an organization, providing insights into where they are working well and where there might be vulnerabilities or inefficiencies.

   Source: Adapted from community discussion — Kunzle

   Next question

9. Question 819 · 1243 in bank

   Which of the following presents the GREATEST challenge to a security operations center's timely identification of potential security breaches?

   • AAn organization has a decentralized data center that uses cloud services.
   • BOperating systems are no longer supported by the vendor.
   • CIT system clocks are not synchronized with the centralized logging server.
   • DThe patch management system does not deploy patches in a timely manner.

   Show answer

   Answer: C

   Explanation

   Well, SOC relies on SIEM and other automation and aggregation tools. If time is off on the devices around the network, then those tools cannot do their job effectively enough or at all. So I'd say it's C. Although, decentralized datacenter would also be a problem since they would not have it integrated into monitoring infrastructure. But then again, I'm assuming too much about the question/scenario, which is wrong approach for the exam.

   Source: Adapted from community discussion — AlexJacobson

   Next question

10. Question 820 · 1243 in bank

    An organization plans to utilize Software as a Service (SaaS) and is in the process of selecting a vendor. What should the information security manager do FIRST to support this initiative?

    • AReview independent security assessment reports for each vendor.
    • BBenchmark each vendor's services with industry best practices.
    • CDefine information security requirements and processes.
    • DAnalyze the risks and propose mitigating controls.

    Show answer

    Answer: C

    Explanation

    Defining information security requirements and processes is the first step that the information security manager should take when supporting the organization's use of Software as a Service (SaaS). This is because it sets the foundation for the selection of a SaaS vendor that meets the organization's security needs and expectations. Without clear security requirements and processes, it may be difficult to determine the level of security that each vendor can provide, or to assess the suitability of each vendor for the organization's specific needs. By establishing the security requirements and processes first, the information security manager can ensure that the selection of a SaaS vendor aligns with the organization's overall information security strategy.

    Source: Adapted from community discussion — Broesweelies

    References

    • isaca.org documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 811. 1243 questions available.