CISM practice questions 911–920

1. Question 911 · 1243 in bank

   An information security manager is implementing a bring your own device (BYOD) program. Which of the following would BEST ensure that users adhere to the security standards?

   • APublish the standards on the intranet landing page.
   • BDeploy a device management solution.
   • CEstablish an acceptable use policy.
   • DMonitor user activities on the network.

   Show answer

   Answer: C

   Explanation

   C. Establish an acceptable use policy. An acceptable use policy (AUP) is a set of guidelines that outline what is considered acceptable behavior when using the organization's resources, including personal devices that are allowed on the network under the BYOD program. An AUP can include requirements for device security, such as using encryption and passcodes, and can also specify the types of activities that are prohibited on the network, such as downloading pirated content or engaging in illegal activities. By clearly communicating the expectations to the users, it will be easier to ensure that they adhere to the security standards.

   Source: Adapted from community discussion — Broesweelies

   Next question

2. Question 912 · 1243 in bank

   Which of the following is MOST important for an information security manager to verify when selecting a third-party forensics provider?

   • AExistence of a right to audit clause
   • BTechnical capabilities of the provider
   • CResults of the provider's business continuity tests
   • DExistence of the provider's incident response plan

   Show answer

   Answer: B

   Next question

3. Question 913 · 1243 in bank

   Which of the following security processes will BEST prevent the exploitation of system vulnerabilities?

   • AAntivirus software
   • BLog monitoring
   • CIntrusion detection
   • DPatch management

   Show answer

   Answer: D

   Next question

4. Question 914 · 1243 in bank

   Which of the following is the BEST method to protect against emerging advanced persistent threat (APT) actors?

   • AProviding ongoing training to the incident response team
   • BUpdating information security awareness materials
   • CImplementing a honeypot environment
   • DImplementing proactive systems monitoring

   Show answer

   Answer: D

   Explanation

   All of the options listed can be useful in protecting against advanced persistent threats (APTs), but the BEST method to protect against emerging APT actors depends on the specific situation and the organization's security needs. That being said, option D, implementing proactive systems monitoring, is generally considered a critical security measure in protecting against APTs. APT actors are known for their ability to evade detection and persist within a system for long periods of time, making proactive monitoring a key defense. This approach involves monitoring system logs, network traffic, and other sources of information to detect potential threats before they can cause damage.

   Source: Adapted from community discussion — ccKane

   Next question

5. Question 915 · 1243 in bank

   Measuring which of the following is the MOST accurate way to determine the alignment of an information security strategy with organizational goals?

   • ANumber of blocked intrusion attempts
   • BNumber of business cases reviewed by senior management
   • CTrends in the number of identified threats to the business
   • DPercentage of controls integrated into business processes

   Show answer

   Answer: D

   Explanation

   While the review of business cases by senior management is an important aspect of evaluating the alignment of the information security strategy with the organization's goals and objectives, it may not necessarily provide the MOST accurate measure. Business cases are specific projects or initiatives that may have different priorities and goals, and may not necessarily represent the overall organizational goals. Additionally, the review of business cases may not capture the full scope of the information security strategy or the level of integration with the organization's operations and processes.

   Source: Adapted from community discussion — ccKane

   Next question

6. Question 916 · 1243 in bank

   An organization recently outsourced the development of a mission-critical business application. Which of the following would be the BEST way to test for the existence of backdoors?

   • APerform security code reviews on the entire application
   • BScan the entire application using a vulnerability scanning tool
   • CMonitor Internet traffic for sensitive information leakage
   • DRun the application from a high-privileged account on a test system

   Show answer

   Answer: A

   Next question

7. Question 917 · 1243 in bank

   When remote access to confidential information is granted to a vendor for analytic purposes, which of the following is the MOST important security consideration?

   • AThe vendor must be able to amend data
   • BThe vendor must agree to the organization's information security policy
   • CData is encrypted in transit and at rest at the vendor site
   • DData is subject to regular access log review

   Show answer

   Answer: B

   Explanation

   B because encrypting data in transit and in rest, must be a part of the security policy. Then security policy is higher level so this is the managers answer.

   Source: Adapted from community discussion — rbg8

   Next question

8. Question 918 · 1243 in bank

   When investigating an information security incident details of the incident should be shared:

   • Awidely to demonstrate positive intent
   • Bonly as needed
   • Conly with management
   • Donly with internal audit

   Show answer

   Answer: B

   Next question

9. Question 919 · 1243 in bank

   The PRIMARY advantage of involving end users in continuity planning is that they:

   • Acan see the overall impact to the business
   • Bare more objective than information security management
   • Ccan balance the technical and business risks
   • Dhave a better understanding of specific business needs

   Show answer

   Answer: D

   Next question

10. Question 920 · 1243 in bank

    In a business proposal, a potential vendor promotes being certified for international security standards as a measure of its security capability. Before relying on this certification, it is MOST important that the information security manager confirms that the:

    • Acertification scope is relevant to the service being offered
    • Bcertification will remain current through the life of the contract
    • Ccurrent international standard was used to assess security processes
    • Dcertification can be extended to cover the client's business

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISM practice, question 911. 1243 questions available.