Question 901 · 1243 in bank
What is the BEST way to reduce the impact of a successful ransomware attack?
Show answer
Answer: C
Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
What is the BEST way to reduce the impact of a successful ransomware attack?
Answer: C
Which of the following is the BEST approach for governing noncompliance with security requirements?
Answer: B
Simply requiring users to acknowledge the acceptable use policy (option A) may help establish awareness of security requirements, but it does not directly address noncompliance or the associated risks. Requiring the steering committee to review exception requests (option C) may introduce delays in the decision-making process, which could impact operational efficiency. Basing mandatory review and exception approvals on inherent risk (option D) does not take into account the effectiveness of implemented controls or the actual level of risk present in the organization. By considering residual risk, the organization can prioritize its efforts, allocate resources effectively, and focus on addressing noncompliance with security requirements in a manner that aligns with its risk management strategy.
Source: Adapted from community discussion — wello
Which of the following is MOST important to ensuring information stored by an organization is protected appropriately?
Answer: B
B. Assigning information asset ownership Assigning information asset ownership is the most important aspect of ensuring that information stored by an organization is protected appropriately. When information assets have clearly defined owners, individuals or teams are accountable for their protection, including implementing security measures, monitoring for threats, and ensuring compliance with policies and regulations. This accountability fosters a sense of responsibility and promotes proactive management of information security risks. While options A, C, and D are also important components of an effective information security program, assigning ownership directly addresses the fundamental responsibility for protecting information assets.
Source: Adapted from community discussion — REHAMAZZAM
In which cloud model does the cloud service buyer assume the MOST security responsibility?
Answer: A
IaaS - Organization has more responsibility than service provider. SaaS - Service Provider has more responsibility than Organization PaaS - Most of the component/activity has shared responsibilities.
Source: Adapted from community discussion — karanvp
Which of the following is the GREATEST benefit of conducting an organization-wide security awareness program?
Answer: B
Which of the following is the FIRST step to establishing an effective information security program?
Answer: C
The first step to establishing an effective information security program is to create a business case (option C). A business case outlines the justification for the program by identifying the business needs, goals, objectives, potential benefits, and costs associated with implementing the security program. Creating a business case helps secure organizational buy-in and support for the program. It provides a clear understanding of why the program is necessary and what it aims to achieve. The business case also serves as a foundation for obtaining the necessary resources and funding to implement the program effectively.
Source: Adapted from community discussion — drewl25
An information security manager believes that information has been classified inappropriately, increasing the risk of a breach. Which of the following is the information security manager's BEST action?
Answer: B
Which of the following BEST supports the incident management process for attacks on an organization's supply chain?
Answer: D
The BEST option that supports the incident management process for attacks on an organization’s supply chain is D. Establishing communication paths with vendors. This is because communication is key in incident management and establishing communication paths with vendors can help in identifying the source of the attack and mitigating it. Requiring security awareness training for vendor staff (option A) is also important but it does not directly support the incident management process. Including service level agreements (SLAs) in vendor contracts (option B) is important but it does not directly support the incident management process. Performing integration testing with vendor systems (option C) is important but it does not directly support the incident management process either
Source: Adapted from community discussion — mad68
Which of the following is MOST useful to an information security manager when conducting a post-incident review of an attack?
Answer: D
Understanding the method of operation (often referred to as the modus operandi or tactics, techniques, and procedures - TTPs) used by the attacker is crucial. It allows the organization to determine vulnerabilities that were exploited, review the effectiveness of current controls, and make necessary adjustments to prevent similar future attacks.
Source: Adapted from community discussion — Kunzle
An organization has purchased a security information and event management (SIEM) tool. Which of the following is MOST important to consider before implementation?
Answer: A
This one was a tough one, but I don't think it's C. As people mentioned, the contract was already signed. Technical support is a close second, but how will they know how to help if you don't know what controls you are monitoring... A. Controls to be Monitored By knowing what controls are to be monitored, you can design your architecture of how a SIEM ingests data around compliance regulations such as PCI, HIPA, and SOX.
Source: Adapted from community discussion — YetiSpaghetti
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 901. 1243 questions available.
Version 1.0.0. How we source questions