Which of the following is MOST important to ensuring information stored by an organization is protected appropriately?

Assigning information asset ownership

Defining information stewardship roles

Defining security asset categorization

Assigning information asset ownership

Developing a records retention schedule

Which of the following is the MOST important factor of a successful information security program?

The program is focused on risk management.

The program follows industry best practices.

The program is based on a well-developed strategy.

The program is cost-efficient and within budget,

The program is focused on risk management.

Which of the following is the BEST approach when creating a security policy for a global organization subject to varying laws and regulations?

Establish baseline standards for all locations and add supplemental standards as required

Incorporate policy statements derived from third-party standards and benchmarks.

Adhere to a unique corporate privacy and security standard

Establish baseline standards for all locations and add supplemental standards as required

Require that all locations comply with a generally accepted set of industry

Which of the following presents the GREATEST challenge to the recovery of critical systems and data following a ransomware incident?

Unavailable or corrupt data backups

Lack of encryption for backup data in transit

Undefined or undocumented backup retention policies

Ineffective alert configurations for backup operations

Unavailable or corrupt data backups

Which of the following change management procedures is MOST likely to cause concern to the information security manager?

The development manager migrates programs into production

Fallback processes are tested the weekend before changes are made

Users are not notified of scheduled system changes

A manual rather than an automated process is used to compare program versions.

The development manager migrates programs into production

Which of the following is an example of risk mitigation?

Discontinuing the activity associated with the risk

Performing a cost-benefit analysis

Which of the following is MOST important to include in an incident response plan to ensure incidents are responded to by the appropriate individuals?

A detailed incident notification process

Skills required for the incident response team

A list of external resources to assist with incidents

Service level agreements (SLAs)

A detailed incident notification process

Which of the following is the BEST evidence of alignment between corporate and information security governance?

Security key performance indicators (KPIs)

Regular security policy reviews

What is the BEST way to reduce the impact of a successful ransomware attack?

Perform frequent backups and store them offline.

Purchase or renew cyber insurance policies.

Include provisions to pay ransoms ih the information security budget.

Monitor the network and provide alerts on intrusions.

Which of the following would be the BEST way for an information security manager to improve the effectiveness of an organization's information security program?

Collaborate with business and IT functions in determining controls.

Focus on addressing conflicts between security and performance.

Collaborate with business and IT functions in determining controls.

Include information security requirements in the change control process.

Obtain assistance from IT to implement automated security cantrals.

The MAIN benefit of implementing a data loss prevention (DLP) solution is to:

complement the organization's detective controls.

enhance the organization's antivirus controls.

eliminate the risk of data loss.

complement the organization's detective controls.

reduce the need for a security awareness program.

Which of the following is PRIMARILY determined by asset classification?

Level of protection required for assets

Insurance coverage required for assets

Level of protection required for assets

ACISO learns that a third-party service provider did not notify the organization of a data breach that affected the service provider's data center. Which of the following should the CISO do FIRST?

Determine the extent of the impact to the organization.

Recommend canceling the outsourcing contract.

Request an independent review of the provider's data center.

Notify affected customers of the data breach.

Determine the extent of the impact to the organization.

An information security manager developing an incident response plan MUST ensure it includes:

a business impact analysis (BIA).

critical infrastructure diagrams.

Which of the following BEST supports the incident management process for attacks on an organization's supply chain?

Including service level agreements (SLAs) in vendor contracts

Establishing communication paths with vendors

Requiring security awareness training for vendor staff

Performing integration testing with vendor systems

Which of the following BEST ensures information security governance is aligned with corporate governance?

Integration of security reporting into corporate reporting

A security steering committee including IT representation

A consistent risk management approach

An information security risk register

Integration of security reporting into corporate reporting

Which of the following should an information security manager do FIRST upon learning that some security hardening settings may negatively impact future business activity?

Reduce security hardening settings.

Inform business management of the risk.

Which of the following is the MOST important reason to ensure information security is aligned with the organization's strategy?

To optimize security risk management

To identify the organization's risk tolerance

To align security roles and responsibilities

To optimize security risk management

Which of the following should be the MOST important consideration when establishing information security policies for an organization?

Senior management supports the policies.

Job descriptions include requirements to read security policies.

The policies are updated annually.

Senior management supports the policies.

The policies are aligned to industry best practices.

Which of the following is the PRIMARY benefit of implementing a vulnerability assessment process?

Proactive risk management is facilitated.

Which of the following metrics BEST measures the effectiveness of an organization's information security program?

Return on information security investment

Increase in risk assessments completed

Reduction in information security incidents

Return on information security investment

Number of information security business cases developed

When properly implemented, secure transmission protocols protect transactions:

from denial of service (DoS) attacks.

Which of the following is MOST important to have in place as a basis for developing an effective information security program that supports the organization's business goals?

An information security strategy

Metrics to drive the information security program

A defined security organizational structure

An information security strategy

Which of the following is the MOST important consideration when establishing an organization's information security governance committee?

Members represent functions across the organization.

Members have knowledge of information security controls.

Members are business risk owners.

Members are rotated periodically.

Members represent functions across the organization.

An information security manager learns that a risk owner has approved exceptions to replace key controls with weaker compensating controls to improve process efficiency. Which of the following should be the GREATEST concern?

Risk levels may be elevated beyond acceptable limits.

Security audits may report more high-risk findings.

The compensating controls may not be cost efficient.

Noncompliance with industry best practices may result.

Which of the following BEST indicates that information assets are classified accurately?

Appropriate prioritization of information risk treatment

Increased compliance with information security policy

Appropriate assignment of information asset owners

An accurate and complete information asset catalog

Which of the following is MOST important to include in a post-incident review following a data breach?

Evaluations of the adequacy of existing controls

An evaluation of the effectiveness of the information security strategy

Evaluations of the adequacy of existing controls

Documentation of regulatory reporting requirements

A review of the forensics chain of custom

Which of the following should be the PRIMARY area of focus when mitigating security risks associated with emerging technologies?

Compatibility with legacy systems

Application of corporate hardening standards

Integration with existing access controls

Which of the following would be the MOST effective way to present quarterly reports to the board on the status of the information security program?

An information security dashboard

A capability and maturity assessment

Detailed analysis of security program KPIs

An information security dashboard

An information security risk register

Which of the following Is MOST useful to an information security manager when conducting a post-incident review of an attack?

Method of operation used by the attacker

Cost of the attack to the organization

Method of operation used by the attacker

Details from intrusion detection system (IDS) logs

An organization is planning to outsource the execution of its disaster recovery activities. Which of the following would be MOST important to include in the outsourcing agreement?

Recovery time objectives (RTOs)

Definition of when a disaster should be declared

Requirements for regularly testing backups

Recovery time objectives (RTOs)

The disaster recovery communication plan

An organization plans to offer clients a new service that is subject to regulations. What should the organization do FIRST when developing a security strategy in support of this new service?

Perform a gap analysis against the current state

Determine security controls for the new service.

Establish a compliance program,

Perform a gap analysis against the current state

Hire new resources to support the service.

Isaca CISM Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

An organization finds it necessary to quickly shift to a work-fromhome model with an increased need for remote access security.

Which of the following should be given immediate focus?

Moving to a zero trust access model

Enabling network-level authentication

Enhancing cyber response capability

Strengthening endpoint security

Comment (0)

Isaca CISM Practice Test 1

Question

Isaca CISM Practice Tests

Practice Tests