What should be an information security manager's MOST important consideration when developing a multi-year plan?

Ensuring alignment with the plans of other business units

Ensuring contingency plans are in place for potential information security risks

Ensuring alignment with the plans of other business units

Allowing the information security program to expand its capabilities

Demonstrating projected budget increases year after year

An organization plans to utilize Software as a Service (SaaS) and is in the process of selecting a vendor. What should the information security manager do FIRST to support this initiative?

Define information security requirements and processes.

Review independent security assessment reports for each vendor.

Benchmark each vendor's services with industry best practices.

Analyze the risks and propose mitigating controls.

Define information security requirements and processes.

Which of the following BEST facilitates an information security manager's efforts to obtain senior management commitment for an information security program?

Communicating the residual risk

Presenting evidence of inherent risk

Reporting the security maturity level

Presenting compliance requirements

Communicating the residual risk

An organization's disaster recovery plan (DRP) is documented and kept at a disaster recovery site. Which of the following is the BEST way to ensure the plan can be carried out in an emergency?

Provide annual disaster recovery training to appropriate staff.

Store disaster recovery documentation in a public cloud.

Maintain an outsourced contact center in another country.

Require disaster recovery documentation be stored with all key decision makers.

Provide annual disaster recovery training to appropriate staff.

Reevaluation of risk is MOST critical when there is:

a change in the threat landscape.

resistance to the implementation of mitigating controls.

a management request for updated security reports.

a change in the threat landscape.

What is the PRIMARY benefit to an organization when information security program requirements are aligned with employment and staffing processes?

Access is granted based on task requirements.

Security incident reporting procedures are followed.

Security staff turnover is reduced.

Information assets are classified appropriately.

Access is granted based on task requirements.

An information security manager determines there are a significant number of exceptions to a newly released industry-required security standard. Which of the following should be done NEXT?

Assess the consequences of noncompliance.

Revise the organization's security policy.

Assess the consequences of noncompliance.

Conduct an information security audit.

To confirm that a third-party provider complies with an organization's information security requirements, it is MOST important to ensure:

right to audit is included in the service level agreement (SLA).

security metrics are included in the service level agreement (SLA).

contract clauses comply with the organization's information security policy.

the information security policy of the third-party service provider is reviewed.

right to audit is included in the service level agreement (SLA).

Which of the following is MOST important to include in monthly information security reports to the board?

Trend analysis of security metrics

Root cause analysis of security incidents

Which of the following should be the PRIMARY basis for determining the value of assets?

Business cost when assets are not available

Original cost of the assets minus depreciation

Which of the following BEST enables the integration of information security governance into corporate governance?

An information security steering committee with business representation

Well-decumented information security policies and standards

An information security steering committee with business representation

Clear lines of authority across the organization

Senior management approval of the information security strategy

Which of the following is MOST important for an information security manager to verify when selecting a third-party forensics provider?

Technical capabilities of the provider

Existence of a right-to-audit clause

Results of the provider's business continuity tests

Technical capabilities of the provider

Existence of the provider's incident response plan

When performing a business impact analysis (BIA), who should calculate the recovery time and cost estimates?

Business continuity coordinator

Which of the following BEST indicates the effectiveness of a recent information security awareness campaign delivered across the organization?

Increase in the number of reported security incidents

Decrease in the number of security incidents

Increase in the frequency of security incident escalations

Reduction in the impact of security incidents

Increase in the number of reported security incidents

Which of the following should be the MOST important consideration of business continuity management?

Identifying critical business processes

Ensuring the reliability of backup data

Securing critical information assets

A user reports a stolen personal mobile device that stores sensitive corporate data. Which of the following will BEST minimize the risk of data exposure?

Prevent the user from using personal mobile devices.

Report the incident to the police.

Remove user's access to corporate data.

Which of the following BEST indicates that an organization has effectively tested its business continuity and disaster recovery plans within the stated recovery time objectives (RTOs)?

Regulatory requirements are being met.

Internal compliance requirements are being met.

Risk management objectives are being met.

Which of the following is the BEST approach to incident response for an organization migrating to a cloud-based solution?

Revise incident response procedures to encompass the cloud environment.

Adopt the cloud provider's incident response procedures.

Transfer responsibility for incident response to the cloud provider.

Continue using the existing incident response procedures.

Revise incident response procedures to encompass the cloud environment.

Which of the following is the BEST indication of effective information security governance?

Information security is integrated into corporate governance.

Information security is considered the responsibility of the entire information security team.

Information security controls are assigned to risk owners.

Information security is integrated into corporate governance.

Information security governance is based on an external security framework.

Which of the following is the BEST way to assess the risk associated with using a Software as a Service (SaaS) vendor?

Review the results of the vendor's independent control reports.

Verify that information security requirements are included in the contract.

Request customer references from the vendor.

Require vendors to complete information security questionnaires.

Review the results of the vendor's independent control reports.

Which of the following is a PRIMARY benefit of managed security solutions?

Greater ability to focus on core business operations

Easier implementation across an organization

Greater ability to focus on core business operations

Which of the following presents the GREATEST challenge to a security operations center's wna GY of potential security breaches?

IT system clocks are not synchronized with the centralized logging server.

Operating systems are no longer supported by the vendor.

The patch management system does not deploy patches in a timely manner.

An organization has a decentralized data center that uses cloud services.

An information security manager believes that information has been classified inappropriately, = the risk of a breach. Which of the following is the information security manager's BEST action?

Complete a risk assessment and refer the results to the data owners.

Refer the issue to internal audit for a recommendation.

Re-classify the data and increase the security level to meet business risk.

Instruct the relevant system owners to reclassify the data.

Complete a risk assessment and refer the results to the data owners.

Which of the following is the BEST indication of information security strategy alignment with the:

Number of business objectives directly supported by information security initiatives

Percentage of information security incidents resolved within defined service level agreements (SLAs)

Percentage of corporate budget allocated to information security initiatives

Number of business executives who have attended information security awareness sessions

Number of business objectives directly supported by information security initiatives

Which of the following is the BEST way to ensure the capability to restore clean data after a ransomware attack?

Maintain multiple offline backups

Encrypt sensitive production data

Perform Integrity checks on backups

Maintain multiple offline backups

Which of the following BEST enables an organization to transform its culture to support information security?

Robust technical security controls

Incentives for security incident reporting

Which of the following has The GREATEST positive impact on The ability to execute a disaster recovery plan (DRP)?

Conducting a walk-through of the plan

Storing the plan at an offsite location

Communicating the plan to all stakeholders

Conducting a walk-through of the plan

Recovery time objectives (RTOs) are BEST determined by:

database administrators (DBAs).

Which of the following is MOST effective for communicating forward-looking trends within security reporting?

Key performance indicators (KPIs)

The PRIMARY objective of performing a post-incident review is to:

re-evaluate the impact of incidents.

Isaca CISM Practice Test 5 - Free Online Exam Prep & Questions

Which of the following would BEST help to ensure appropriate security controls are built into software?

Become a Premium Member for full access

Unlock Premium Member

Isaca CISM Practice Test 5

Question

Isaca CISM Practice Tests

Practice Tests