Which of the following is the BEST way to address data availability concerns when outsourcing information security administration?

Develop service level agreements (SLAs).

Stipulate insurance requirements.

Require nondisclosure agreements (NDAs).

What should be the FIRST step when implementing data loss prevention (DLP) technology?

Classify the organization's data.

Perform due diligence with vendor candidates.

Classify the organization's data.

Perform a cost-benefit analysis.

Which of the following would provide the MOST value to senior management when presenting the results of a risk assessment?

Illustrating risk on a heat map

Mapping the risks to the security classification scheme

Illustrating risk on a heat map

Mapping the risks to existing controls

Providing a technical risk assessment report

Which of the following is the BEST indicator of a successful intrusion into an organization's systems?

Increase in the number of irregular application requests

Decrease in internal network traffic

Increase in the number of failed login attempts

Increase in the number of irregular application requests

Decrease in available storage space

Which of the following BEST enables the restoration of operations after a limited ransomware incident occurs?

Documented eradication procedures

Which of the following is MOST important to determine following the discovery and eradication of a malware attack?

The method of detecting the malware

What should a global information security manager do FIRST when informed that a new regulation with significant impact will go into effect soon?

Perform a privacy impact assessment (PIA).

Perform a vulnerability assessment.

Perform a business impact analysis (BIA).

An organization has been penalized by regulatory authorities for failing to notify them of a major security breach that may have compromised customer data. Which of the following is MOST likely in need of review and updating to prevent similar penalties in the future?

Information security policies and procedures

Incident response training program

The PRIMARY purpose for deploying information security metrics is to:

provide information needed to make decisions.

compare program effectiveness to benchmarks.

support ongoing security budget requirements.

ensure that technical operations meet specifications.

provide information needed to make decisions.

The BEST way to report to the board on the effectiveness of the information security program is to present:

a dashboard illustrating key performance metrics.

a summary of the most recent audit findings.

peer-group industry benchmarks.

a report of cost savings from process improvements.

Which of the following should be done FIRST when establishing an information security governance framework?

Gain an understanding of the business and cultural attributes.

Evaluate information security tools and skills relevant for the environment.

Gain an understanding of the business and cultural attributes.

Contract a third party to conduct an independent review of the program.

Conduct a cost-benefit analysis of the framework.

Which of the following is the BEST way to build a risk-aware culture?

Establish a channel for staff to report risks.

Periodically change risk awareness messages.

Ensure that threats are documented and communicated in a timely manner.

Establish a channel for staff to report risks.

Periodically test compliance with security controls.

Which of the following is the MOST important input to the development of an effective information security strategy?

Business processes and requirements

Risk and business impact assessments

Business processes and requirements

Current and desired state of security

Well-defined security policies and procedures

Which of the following is the PRIMARY preventive method to mitigate risks associated with privileged accounts?

Provide privileged account access only to users who need it.

Perform periodic certification of access to privileged accounts.

Frequently monitor activities on privileged accounts.

Provide privileged account access only to users who need it.

Which of the following would BEST ensure that security risk assessment is integrated into the life cycle of major IT projects?

Having the information security manager participate on the project steering committees

Training project managers on risk assessment

Having the information security manager participate on the project steering committees

Applying global security standards to the IT projects

Integrating the risk assessment into the internal audit program

Which of the following should be implemented to BEST reduce the likelihood of a security breach?

A configuration management program

An experienced information security manager joins a new organization and begins by conducting an audit of all key IT processes. Which of the following findings about the vulnerability management program should be of GREATEST concern?

Identified vulnerabilities are not logged and resolved in a timely manner.

Identified vulnerabilities are not published and communicated in awareness programs.

Identified vulnerabilities are not logged and resolved in a timely manner.

The number of vulnerabilities identified exceeds industry benchmarks. D. Vulnerabilities are identified by internal staff rather than by external consultants.

A proposal designed to gain buy-in from senior management for a new security project will be MOST effective if it includes:

projected return on investment (ROI).

analysis of current threat landscape.

historical data of reported incidents.

projected return on investment (ROI).

industry benchmarking gap analysis.

Which of the following is a PRIMARY function of an incident response team?

To provide effective incident mitigation

To provide a risk assessment for zero-day vulnerabilities

To provide a single point of contact for critical incidents

To provide a business impact analysis (BIA)

The PRIMARY goal of a post-incident review should be to:

determine how to improve the incident handling process.

establish the cost of the incident to the business.

determine why the incident occurred.

identify policy changes to prevent a recurrence.

determine how to improve the incident handling process.

Which of the following is the MOST critical consideration when shifting IT operations to an Infrastructure as a Service (laaS) model hosted in a foreign country?

Laws and regulations of the origin country may not be applicable.

Labeling of data may help to ensure data is assigned to the correct cloud type.

Laws and regulations of the origin country may not be applicable.

There may be liabilities and penalties in the event of a security breach.

Data may be stored in unknown locations and may not be easily retrievable.

When remote access is granted to a company's internal network, the MOST important consideration should be that access is provided:

on a need-to-know basis subject to controls.

subject to legal and regulatory requirements.

by the use of a remote access server.

if a robust IT infrastructure exists.

Which of the following is MOST important to the effectiveness of an information security steering committee?

The committee has cross-organizational representation.

The committee has strong regulatory knowledge.

The committee is comprised of representatives from senior management.

The committee has cross-organizational representation.

The committee uses a risk management framework.

The PRIMARY purpose of conducting a business impact analysis (BIA) is to determine the:

resources needed for business recovery.

scope of the business continuity program.

resources needed for business recovery.

scope of the incident response plan.

After updating password standards, an information security manager is alerted by various application administrators that the applications they support are incapable of enforcing these standards. The information security manager's FIRST course of action should be to:

determine the potential impact.

implement compensating controls.

evaluate the cost of replacing the applications.

Which of the following is the BEST defense against a brute force attack?

Multi-factor authentication (MFA)

Which of the following is the BEST source of information to support an organization's information security vision and strategy?

Enterprise information security architecture

Which of the following is MOST important to ensuring that incident management plans are executed effectively?

Management support and approval has been obtained.

The incident response team has the appropriate training.

An incident response maturity assessment has been conducted.

A reputable managed security services provider has been engaged.

Which of the following is the PRIMARY reason to conduct a post-incident review?

To improve the response process

To aid in future risk assessments

To improve the response process

To determine whether digital evidence is admissible

To notify regulatory authorities

How does an organization PRIMARILY benefit from the creation of an information security steering committee?

An increased alignment of information security with the business

An increase in information security risk awareness

An increased alignment with industry security trends that impact the business

An increased focus on information security resource management

An increased alignment of information security with the business

Unintentional behavior by an employee caused a major data loss incident. Which of the following is the BEST way for the information security manager to prevent recurrence within the organization?

Improve the security awareness training program.

Implement compensating controls.

Communicate consequences for future instances.

Enhance the data loss prevention (DLP) solution.

Improve the security awareness training program.

Business objectives and organizational risk appetite are MOST useful inputs to the development of information security:

key performance indicators (KPIs).

An information security team plans to strengthen authentication requirements for a customer-facing site, but there are concerns it will negatively impact the user experience. Which of the following is the information security manager's BEST course of action?

Assess business impact against security risk.

Provide security awareness training to customers.

Refer to industry best practices.

Quantify the security risk to the business.

When establishing classifications of security incidents for the development of an incident response plan, which of the following provides the MOST valuable input?

Business impact analysis (BIA) results

Vulnerability assessment results

The business continuity plan (BCP)

Recommendations from senior management

Isaca CISM Practice Test 19 - Free Online Exam Prep & Questions

Which or the following is MOST important to consider when determining backup frequency?

Become a Premium Member for full access

Unlock Premium Member

Isaca CISM Practice Test 19

Question

Isaca CISM Practice Tests

Practice Tests