CISM practice questions 81–90

1. Question 81 · 1243 in bank

   Which of the following is the MOST important outcome of a post-incident review?

   • AThe system affected by the incident is restored to its prior state.
   • BThe root cause of the incident is determined.
   • CThe person responsible for the incident is identified.
   • DThe impact of the incident is reported to senior management.

   Show answer

   Answer: B

   Next question

2. Question 82 · 1243 in bank

   Which of the following is the BEST indicator of the performance of a security program?

   • AChanges in return on investments (ROIs)
   • BChanges in the maturity level
   • CChanges in budget allocation
   • DChanges in security training attendance

   Show answer

   Answer: B

   Explanation

   B. Changes in the maturity level. The maturity level of a security program reflects its overall effectiveness, resilience, and ability to adapt to new threats and challenges. By tracking changes in the maturity level, organizations can gain insight into the strengths and weaknesses of their security program and make informed decisions to improve it. While other indicators like changes in ROIs, budget allocation, and security training attendance are important, they may not provide as comprehensive a view of the overall performance of the security program as changes in maturity level.

   Source: Adapted from community discussion — koala_lay

   Next question

3. Question 83 · 1243 in bank

   An organization has remediated a security flaw in a system. Which of the following should be done NEXT?

   • AAllocate budget for penetration testing.
   • BUpdate the system's documentation.
   • CAssess the residual risk.
   • DShare lessons learned with the organization.

   Show answer

   Answer: C

   Next question

4. Question 84 · 1243 in bank

   Which of the following BEST facilitates the development of a comprehensive information security policy?

   • AAlignment with an established information security framework
   • BSecurity key performance indicators (KPIs)
   • CA review of recent information security incidents
   • DAn established internal audit program

   Show answer

   Answer: A

   Next question

5. Question 85 · 1243 in bank

   Which of the following is the MOST effective way to demonstrate improvement in security performance?

   • AReport the results of a security control self-assessment (CSA).
   • BPresent trends in a validated metrics dashboard.
   • CProvide a summary of security project return on investments (ROIs).
   • DPresent vulnerability testing results.

   Show answer

   Answer: B

   Next question

6. Question 86 · 1243 in bank

   In order to gain organization-wide support for an information security program, which of the following is MOST important to consider?

   • ACorporate risk framework
   • BCorporate culture
   • CClarity of security roles and responsibilities
   • DMaturity of the security policy

   Show answer

   Answer: B

   Next question

7. Question 87 · 1243 in bank

   Which of the following is the BEST way to ensure the business continuity plan (BCP) is current?

   • AManage business process changes.
   • BUpdate business impact analyses (BIAs) on a regular basis.
   • CReview and update emergency contact lists.
   • DConduct periodic testing.

   Show answer

   Answer: B

   Next question

8. Question 88 · 1243 in bank

   Which of the following would be MOST useful when determining the business continuity strategy for a large organization's data center?

   • ABusiness impact analysis (BIA)
   • BIncident root cause analysis
   • CStakeholder feedback analysis
   • DBusiness continuity risk analysis

   Show answer

   Answer: A

   Explanation

   A: BIA is crucial to help identify and evaluate the effects of disruptions on critical business functions and processes, providing the necessary information to develop effective continuity strategies.

   Source: Adapted from community discussion — Booict

   Next question

9. Question 89 · 1243 in bank

   The results of a risk assessment for a potential network reconfiguration reveal a high likelihood of sensitive data being compromised. What is the information security manager's BEST course of action?

   • ASeek an independent opinion to confirm the findings.
   • BDetermine alignment with existing regulations.
   • CReport findings to key stakeholders.
   • DRecommend additional network segmentation.

   Show answer

   Answer: C

   Next question

10. Question 90 · 1243 in bank

    Who should be included in INITIAL discussions regarding a failed security control?

    • APenetration testers
    • BThe service provider
    • CSenior management
    • DThe process owner

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 81. 1243 questions available.