An email digital signature will:

verify to recipient the integrity of an email message.

protect the confidentiality of an email message.

verify to recipient the integrity of an email message.

automatically correct unauthorized modification of an email message.

prevent unauthorized modification of an email message.

From an information security perspective, legal issues associated with a transborder flow of technology-related items are MOST often

encryption tools and personal data.

website transactions and taxation.

software patches and corporate date.

encryption tools and personal data.

lack of competition and free trade.

Which of the following is MOST important in order to obtain senior leadership support when presenting an information security strategy?

The strategy aligns with management's acceptable level of risk.

The strategy addresses ineffective information security controls.

The strategy aligns with industry benchmarks and standards.

The strategy addresses organizational maturity and the threat environment.

The MOST important information for influencing management's support of information security is:

an demonstration of alignment with the business strategy.

An identification of the overall threat landscape.

A report of a successful attack on a competitor.

An identification of organizational risks.

An investigation of a recent security incident determined that the root cause was negligent handing of incident alerts by system admit manager to address this issue?

Provide incident response training to data custodians.

Conduct a risk assessment and share the result with senior management.

Revise the incident response plan-to align with business processes.

Provide incident response training to data custodians.

Provide incident response training to data owners.

Which of the following has the GREATEST influence on the successful integration of information security within the business?

Organizational structure and culture

Risk tolerance and organizational objectives

The desired state of the organization

Which of the following BEST supports effective communication during information security incidents7

Predetermined service level agreements (SLAs)

Frequent incident response training sessions

Centralized control monitoring capabilities

Responsibilities defined within role descriptions

Predetermined service level agreements (SLAs)

Which of the following should include contact information for representatives of equipment and software vendors?

Information security program charter

Service level agreements (SLAs)

A finance department director has decided to outsource the organization's budget application and has identified potential providers. Which of the following actions should be initiated FIRST by IN information security manager?

Determine the required security controls for the new solution

Review the disaster recovery plans (DRPs) of the providers

Obtain audit reports on the service providers' hosting environment

Align the roles of the organization's and the service providers' stats.

Which of the following is the BEST way lo monitor for advanced persistent threats (APT) in an organization?

Search for anomalies in the environment

Network with peers in the industry to share information.

Browse the Internet to team of potential events

Search for anomalies in the environment

Search for threat signatures in the environment.

Which of the following should an information security manager do FIRST after a new cybersecunty regulation has been introduced?

Conduct a cost-benefit analysis.

Consult corporate legal counsel

Update the information security policy.

In addition to executive sponsorship and business alignment, which of the following is MOST critical for information security governance?

Allocation of training resources

An organization is leveraging tablets to replace desktop computers shared by shift-based staff These tablets contain critical business data and are inherently at increased risk of theft Which of the following will BEST help to mitigate this risk''

Conduct a mobile device risk assessment

Deploy mobile device management (MDM)

Implement remote wipe capability.

Create an acceptable use policy.

Conduct a mobile device risk assessment

Which of the following BEST enables an organization to effectively manage emerging cyber risk?

Periodic internal and external audits

Sufficient cyber budget allocation

An organization has decided to outsource IT operations. Which of the following should be the PRIMARY focus of the information security manager?

Security requirements are included in the vendor contract

External security audit results are reviewed.

Service level agreements (SLAs) meet operational standards.

Business continuity contingency planning is provided

A penetration test against an organization's external web application shows several vulnerabilities. Which of the following presents the GREATEST concern?

Exploit code for one of the vulnerabilities is publicly available

A rules of engagement form was not signed prior to the penetration test

Vulnerabilities were not found by internal tests

Vulnerabilities were caused by insufficient user acceptance testing (UAT)

Exploit code for one of the vulnerabilities is publicly available

Which of the following is MOST helpful in determining the criticality of an organization's business functions?

Security assessment report (SAR)

An organization has purchased an Internet sales company to extend the sales department. The information security manager's FIRST step to ensure the security policy framework encompasses the new business model is to:

implement both companies' policies separately

perform a vulnerability assessment

Following a risk assessment, an organization has made the decision to adopt a bring your own device (BYOD) strategy. What should the information security manager do NEXT?

Develop a personal device policy

Implement a mobile device management (MDM) solution

Develop training specific to BYOD awareness

Which of the following is the BEST way to reduce the risk of security incidents from targeted email attacks?

Conduct awareness training across the organization

Implement a data loss prevention (DLP) system

Disable all incoming cloud mail services

Conduct awareness training across the organization

Require acknowledgment of the acceptable use policy

A forensic examination of a PC is required, but the PC has been switched off. Which of the following should be done FIRST?

Perform a bit-by-bit backup of the hard disk using a write-blocking device

Perform a backup of the hard drive using backup utilities.

Perform a bit-by-bit backup of the hard disk using a write-blocking device

Perform a backup of the computer using the network

Reboot the system using third-party forensic software in the CD-ROM drive

Which of the following is MOST important to have in place for an organization's information security program to be effective?

Documented information security processes

While responding to a high-profile security incident, an information security manager observed several deficiencies in the current incident response plan. When would be the BEST time to update the plan?

While responding to the incident

Which of the following BEST enables the assignment of risk and control ownership?

Obtaining senior management buy-in

Aligning to an industry-recognized control framework

Adopting a risk management framework

Obtaining senior management buy-in

Developing an information security strategy

Which of the following metrics is MOST appropriate for evaluating the incident notification process?

Elapsed time between detection, reporting, and response

Average total cost of downtime per reported incident

Elapsed time between response and resolution

Average number of incidents per reporting period

Elapsed time between detection, reporting, and response

Which of the following would BEST support the business case for an increase in the information security budget?

Comparison of information security budgets with peer organizations

Business impact analysis (BIA) results

Frequency of information security incidents

Which of the following would BEST enable the timely execution of an incident response plan?

The introduction of a decision support tool

Clearly defined data classification process

Spoofing should be prevented because it may be used to:

gain illegal entry to a secure system by faking the sender's address,

predict which way a program will branch when an option is presented

assemble information, track traffic, and identify network vulnerabilities.

capture information such as passwords traveling through the network

The PRIMARY consideration when responding to a ransomware attack should be to ensure:

the most recent patches have been applied.

the ransomware attack is contained

An information security team is planning a security assessment of an existing vendor. Which of the following approaches is MOST helpful for properly scoping the assessment?

Review controls listed in the vendor contract

Focus the review on the infrastructure with the highest risk

Review controls listed in the vendor contract

Determine whether the vendor follows the selected security framework rules

Review the vendor's security policy

Which of the following would provide the BEST evidence to senior management that security control performance has improved?

Review of security metrics trends

Demonstrated return on security investment

Results of an emerging threat analysis

Review of security metrics trends

Isaca CISM Practice Test 10 - Free Online Exam Prep & Questions

An information security manager has identified that security risks are not being treated in a timely manner. Which of the following?

Become a Premium Member for full access

Unlock Premium Member

Isaca CISM Practice Test 10

Question

Isaca CISM Practice Tests

Practice Tests