Question 831 · 1243 in bank
When choosing the best controls to mitigate risk to acceptable levels, the information security manager s decision should be MAINLY driven by:
Show answer
Answer: D
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
When choosing the best controls to mitigate risk to acceptable levels, the information security manager s decision should be MAINLY driven by:
Answer: D
A high-risk issue is discovered during an information security risk assessment of a legacy application. The business is unwilling to allocate the resources to remediate the issue. Which of the following would be the information security manager’s BEST course of action?
Answer: C
D would not make a difference since the risk was already presented and risk assessment was performed. When the business is unwilling to allocate resources to remediate a high-risk issue, the BEST course of action for the information security manager is to identify and design compensating controls that reduce the risk to an acceptable level. This demonstrates a proactive approach to mitigating risk while working within the constraints of the business. CISM emphasizes the importance of finding balanced solutions that address risks without disrupting operations unnecessarily.
Source: Adapted from community discussion — HN2025
Which of the following should be an information security managers MOST important consideration when determining if an information asset has been classified appropriately?
Answer: A
And again - the most comprehensive answer is A - value of the information asset to the business. It is value to the business that drives the classification level of that asset, the policy is just there to define how you should take care of it and protect it.
Source: Adapted from community discussion — AlexJacobson
The PRIMARY benefit of introducing a single point of administration in network monitoring is that it:
Answer: B
The PRIMARY benefit of introducing a single point of administration in network monitoring is option B: promotes efficiency in the control of the environment. Introducing a single point of administration in network monitoring refers to consolidating the management and control of network monitoring activities into a centralized system or platform. This consolidation offers several advantages, with the primary benefit being improved efficiency in controlling the environment.
Source: Adapted from community discussion — mad68
Which of the following is the MOST important reason to document information security incidents that are reported across the organization?
Answer: D
D. Prevent the re-occurrence. Which of the following is the MOST important reason to document information security incidents that are reported across the organization? Question is that what is/are the reason (s) of identify unmitigated risk --> for further protections? for better prevention?, for better corrections? Are the above future protections/prevention/corrections considered prevent the recurrence?
Source: Adapted from community discussion — Thavee
Which of the following is MOST important for building a robust information security culture within an organization?
Answer: A
Leaning towards A on this one. The issue with C is that it references just the approval for the policies. For management buy in to be effective, it has to be total support of the entire security program, not just a stamp of approval on the policy documents. However, a robust training program fosters a security culture where everyone in the organization understands the importance of security and takes steps to protect the organization's data and systems.
Source: Adapted from community discussion — Gr3yGh0sT
Which of the following is the BEST way for an organization to ensure that incident response teams are properly prepared?
Answer: D
Which of the following metrics BEST measures the effectiveness of an organization’s information security program?
Answer: C
A. Return on information security investment Don't think C because ,Reduction in info sec incidents can also mean people are not reporting it or unaware. What are your thoughts ?
Source: Adapted from community discussion — wickhaarry
Which of the following is MOST important when conducting a forensic investigation?
Answer: C
Which of the following presents the GREATEST challenge to the recovery of critical systems and data following a ransomware incident?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 831. 1243 questions available.
Version 1.0.0. How we source questions