The PRIMARY objective of performing a post-incident review is to:

re-evaluate the impact of incidents

Which of the following is the MOST important consideration when defining a recovery strategy in a business continuity plan (BCP)?

Organizational tolerance to service interruption

Legal and regulatory requirements

Organizational tolerance to service interruption

Geographical location of the backup site

The fundamental purpose of establishing security metrics is to:

provide feedback on control effectiveness

increase return on investment (ROI)

provide feedback on control effectiveness

While classifying information assets an information security manager notices that several production databases do not have owners assigned to them What is the BEST way to address this situation?

Assign responsibility to the database administrator (DBA).

Review the databases for sensitive content.

Prepare a report of the databases for senior management.

Assign the highest classification level to those databases.

Which of the following events would MOST likely require a revision to the information security program?

A merger with another organization

An increase in industry threat level .

A significant increase in reported incidents

A merger with another organization

Data entry functions for a web-based application have been outsourced to a third-party service provider who will work from a remote site Which of the following issues would be of GREATEST concern to an information security manager?

Server-based malware protection is not enforced

The application does not use a secure communications protocol

The application is configured with restrictive access controls

The business process has only one level of error checking

Server-based malware protection is not enforced

Which of the following should be considered FIRST when recovering a compromised system that needs a complete rebuild?

Intrusion detection system (IDS) logs

Which of the following is the BEST indication that an organization has a mature information security culture?

Staff consistently consider risk in making decisions.

Information security training is mandatory for all staff.

The organization's information security policy is documented and communicated.

The chief information security officer (CISO) regularly interacts with the board.

Staff consistently consider risk in making decisions.

What is the PRIMARY benefit to an organization that maintains an information security governance framework?

Business risks are managed to an acceptable level.

Resources are prioritized to maximize return on investment (ROI)

Information security guidelines are communicated across the enterprise_

The organization remains compliant with regulatory requirements.

Business risks are managed to an acceptable level.

Which of the following would be MOST effective in gaining senior management approval of security investments in network infrastructure?

Demonstrating that targeted security controls tie to business objectives

Performing penetration tests against the network to demonstrate business vulnerability

Highlighting competitor performance regarding network best security practices

Demonstrating that targeted security controls tie to business objectives

Presenting comparable security implementation estimates from several vendors

Which of the following provides the BEST evidence that a recently established infofmation security program is effective?

The number of reported incidents has increased

Regular IT balanced scorecards are communicated.

Senior management has reported fewer junk emails.

The number of tickets associated with IT incidents have stayed consistent

Which of the following would MOST effectively ensure that a new server is appropriately secured?

Enforcing technical security standards

Which of the following should be the PRIMARY objective of an information security governance framework?

Provide a baseline for optimizing the security profile of the organization.

Demonstrate senior management commitment.

Demonstrate compliance with industry best practices to external stakeholders.

Ensure that users comply with the organization's information security policies.

Which of the following is the PRIMARY objective of a business impact analysis (BIA)?

Define the recovery point objective (RPO).

Which of the following is the BEST way for an organization to ensure that incident response teams are properly prepared?

Conducting tabletop exercises appropriate for the organization

Providing training from third-party forensics firms

Obtaining industry certifications for the response team

Conducting tabletop exercises appropriate for the organization

Documenting multiple scenarios for the organization and response steps

Which of the following should an information security manager do FIRST when a mandatory security standard hinders the achievement of an identified business objective?

Revisit the business objective.

Perform a cost-benefit analysis.

Which of the following is the BEST reason for an organization to use Disaster Recovery as a Service (DRaaS)?

It lowers the annual cost to the business.

It transfers the risk associated with recovery to a third party.

It lowers the annual cost to the business.

It eliminates the need to maintain offsite facilities.

It eliminates the need for the business to perform testing.

Which of the following is the MOST important reason for obtaining input from risk owners when implementing controls?

To manage the risk to an acceptable level

To reduce risk mitigation costs

To resolve vulnerabilities in enterprise architecture (EA)

To manage the risk to an acceptable level

To eliminate threats impacting the business

Which of the following is the BEST technical defense against unauthorized access to a corporate network through social engineering?

Requiring multi factor authentication

Requiring challenge/response information

Requiring multi factor authentication

Enforcing frequent password changes

Enforcing complex password formats

Which of the following is the GREATEST benefit of including incident classification criteria within an incident response plan?

Optimized allocation of recovery resources

Ability to monitor and control incident management costs

More visibility to the impact of disruptions

Effective protection of information assets

Optimized allocation of recovery resources

Which of the following BEST enables an organization to provide ongoing assurance that legal and regulatory compliance requirements can be met?

Embedding compliance requirements within operational processes

Engaging external experts to provide guidance on changes in compliance requirements

Performing periodic audits for compliance with legal and regulatory requirements

Assigning the operations manager accountability for meeting compliance requirements

The information security manager has been notified of a new vulnerability that affects key data processing systems within the organization Which of the following should be done FIRST?

Implement compensating controls

Ask the business owner for the new remediation plan

Which of the following is the MOST critical factor for information security program success?

The information security manager's knowledge of the business

comprehensive risk assessment program for information security

The information security manager's knowledge of the business

Security staff with appropriate training and adequate resources

Ongoing audits and addressing open items

Which of the following has the GREATEST influence on an organization's information security strategy?

The organization's risk tolerance

Reverse lookups can be used to prevent successful:

Internet protocol (IP) spoofing

denial of service (DoS) attacks

Internet protocol (IP) spoofing

Which of the following is the MOST effective way to prevent information security incidents?

Implementing a security awareness training program for employees

Implementing a security information and event management (SIEM) tool

Implementing a security awareness training program for employees

Deploying a consistent incident response approach

Deploying intrusion detection tools in the network environment

Which of the following should be the FIRST step in developing an information security strategy?

Identify key stakeholders to champion information security

Determine acceptable levels of information security risk

Create a roadmap to identify security baselines and controls

Perform a gap analysis based on the current state

Identify key stakeholders to champion information security

Which of the following is MOST important for an information security manager to verify before conducting full-functional continuity testing?

Teams and individuals responsible for recovery have been identified

Risk acceptance by the business has been documented

Teams and individuals responsible for recovery have been identified

Copies of recovery and incident response plans are kept offsite

Incident response and recovery plans are documented in simple language

An anomaly-based intrusion detection system (IDS) operates by gathering data on:

normal network behavior and using it as a baseline lor measuring abnormal activity

abnormal network behavior and issuing instructions to the firewall to drop rogue connections

abnormal network behavior and using it as a baseline for measuring normal activity

attack pattern signatures from historical data

A penetration test was conducted by an accredited third party. Which of the following should be the information security manager's FIRST course of action?

Report findings to senior management

Ensure a risk assessment is performed to evaluate the findings

Ensure vulnerabilities found are resolved within acceptable timeframes

Request funding needed to resolve the top vulnerabilities

Report findings to senior management

Which of the following is the BEST course of action when an online company discovers a network attack in progress?

Isolate the affected network segment

Dump all event logs to removable media

Isolate the affected network segment

Enable trace logging on ail events

Shut off all network access points

Relationships between critical systems are BEST understood by

performing a business impact analysis (BIA)

evaluating key performance indicators (KPIs)

performing a business impact analysis (BIA)

developing a system classification scheme

evaluating the recovery time objectives (RTOs)

To help ensure that an information security training program is MOST effective its contents should be

focused on information security policy.

Isaca CISM Practice Test 7 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Isaca CISM Practice Test 7

Question

Isaca CISM Practice Tests

Practice Tests