A financial company executive is concerned about recently increasing cyberattacks and needs to take action to reduce risk. The organization would BEST respond by:

revalidating and mitigating risks to an acceptable level.

increasing budget and staffing levels for the incident response team.

implementing an intrusion detection system (IDS).

revalidating and mitigating risks to an acceptable level.

testing the business continuity plan (BCP).

An organization's HR department requires that employee account privileges be removed from all corporate IT systems within three days of termination to comply with a government regulation However, the systems all have different user directories, and it currently takes up to four weeks to remove the privileges Which of the following would BEST enable regulatory compliance?

Identity and access management (IAM) system

Multi-factor authentication (MFA) system

Identity and access management (IAM) system

Privileged access management (PAM) system

Governance, risk, and compliance (GRC) system

Which of the following is MOST important to convey to employees in building a security risk-aware culture?

The responsibility for security rests with all employees.

Personal information requires different security controls than sensitive information.

Employee access should be based on the principle of least privilege.

Understanding an information asset's value is critical to risk management.

The responsibility for security rests with all employees.

To overcome the perception that security is a hindrance to business activities, it is important for an information security manager to:

promote the relevance and contribution of security.

rely on senior management to enforce security.

promote the relevance and contribution of security.

reiterate the necessity of security.

A risk assessment exercise has identified the threat of a denial of service (DoS) attack Executive management has decided to take no further action related to this risk. The MO ST likely reason for this decision is:

the cost of implementing controls exceeds the potential financial losses.

the risk assessment has not defined the likelihood of occurrence

the reported vulnerability has not been validated

executive management is not aware of the impact potential

the cost of implementing controls exceeds the potential financial losses.

Which of the following will provide the MOST guidance when deciding the level of protection for an information asset?

Impact on information security program

Which of the following is the BEST approach to make strategic information security decisions?

Establish an information security steering committee.

Establish regular information security status reporting.

Establish an information security steering committee.

Establish business unit security working groups.

Establish periodic senior management meetings.

Which of the following is the BEST way to obtain support for a new organization-wide information security program?

Establish an information security strategy committee.

Benchmark against similar industry organizations

Deliver an information security awareness campaign.

Publish an information security RACI chart.

Establish an information security strategy committee.

Which of the following roles is BEST able to influence the security culture within an organization?

Chief information security officer (CISO)

Chief information officer (CIO)

The PRIMARY purpose for continuous monitoring of security controls is to ensure:

alignment with compliance requirements.

Which of the following is the GREATEST value provided by a security information and event management (SIEM) system?

Facilitating the monitoring of risk occurrences

Maintaining a repository base of security policies

Measuring impact of exploits on business processes

Facilitating the monitoring of risk occurrences

Redirecting event logs to an alternate location for business continuity plan

An organization's quality process can BEST support security management by providing:

assurance that security requirements are met.

security configuration controls.

assurance that security requirements are met.

guidance for security strategy.

a repository for security systems documentation.

When performing a business impact analysis (BIA), who should be responsible for determining the initial recovery time objective (RTO)?

Business continuity coordinator

An information security manager has been notified about a compromised endpoint device Which of the following is the BEST course of action to prevent further damage?

Wipe and reset the endpoint device.

Run a virus scan on the endpoint device.

An information security manager has been notified about a compromised endpoint device Which of the following is the BEST course of action to prevent further damage?

Wipe and reset the endpoint device.

Run a virus scan on the endpoint device.

An intrusion has been detected and contained. Which of the following steps represents the BEST practice for ensuring the integrity of the recovered system?

Install the OS, patches, and application from the original source.

Restore the OS, patches, and application from a backup.

Restore the application and data from a forensic copy.

Remove all signs of the intrusion from the OS and application.

The PRIMARY reason to create and externally store the disk hash value when performing forensic data acquisition from a hard disk is to:

validate the integrity during analysis.

validate the confidentiality during analysis.

reinstate original data when accidental changes occur.

validate the integrity during analysis.

provide backup in case of media failure.

Prior to conducting a forensic examination, an information security manager should:

create an image of the original data on new media.

boot the original hard disk on a clean system.

create an image of the original data on new media.

duplicate data from the backup media.

shut down and relocate the server.

A common drawback of email software packages that provide native encryption of messages is that the encryption:

cannot interoperate across product domains.

has an insufficient key length.

When designing a disaster recovery plan (DRP), which of the following MUST be available in order to prioritize system restoration?

Business impact analysis (BIA) results

Key performance indicators (KPIs)

Which of the following should be given the HIGHEST priority during an information security post-incident review?

Evaluating incident response effectiveness

Documenting actions taken in sufficient detail

Updating key risk indicators (KRIs)

Evaluating the performance of incident response team members

Evaluating incident response effectiveness

The MAIN reason for having senior management review and approve an information security strategic plan is to ensure:

the plan aligns with corporate governance.

the organization has the required funds to implement the plan.

compliance with legal and regulatory requirements.

staff participation in information security efforts.

the plan aligns with corporate governance.

To support effective risk decision making, which of the following is MOST important to have in place?

An audit committee consisting of mid-level management

Well-defined and approved controls

Which of the following is the BEST tool to monitor the effectiveness of information security governance?

Key performance indicators (KPIs)

Which of the following is the GREATEST inherent risk when performing a disaster recovery plan (DRP) test?

Disruption to the production environment

Poor documentation of results and lessons learned

Lack of communication to affected users

Disruption to the production environment

Lack of coordination among departments

Which of the following BEST determines the allocation of resources during a security incident response?

A business continuity plan (BCP)

An established escalation process

An organization is in the process of acquiring a new company Which of the following would be the BEST approach to determine how to protect newly acquired data assets prior to integration?

Include security requirements in the contract

Which of the following should be the PRIMARY basis for an information security strategy?

The organization's vision and mission

Results of a comprehensive gap analysis

Audit and regulatory requirements

An information security manager learns through a threat intelligence service that the organization may be targeted for a major emerging threat. Which of the following is the information security manager's FIRST course of action?

Validate the relevance of the information.

Conduct an information security audit.

Validate the relevance of the information.

The PRIMARY advantage of single sign-on (SSO) is that it will:

increase efficiency of access management

increase the security of related applications.

support multiple authentication mechanisms.

A multinational organization is required to follow governmental regulations with different security requirements at each of its operating locations. The chief information security officer (CISO) should be MOST concerned with:

developing a security program that meets global and regional requirements.

ensuring effective communication with local regulatory bodies.

using industry best practice to meet local legal regulatory requirements.

monitoring compliance with defined security policies and standards.

Isaca CISM Practice Test 6 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Isaca CISM Practice Test 6

Question

Isaca CISM Practice Tests

Practice Tests