Which of the following BEST enables an information security manager to obtain organizational support for the implementation of security controls?

Establishing effective stakeholder relationships

Conducting periodic vulnerability assessments

Communicating business impact analysis (BIA) results

Establishing effective stakeholder relationships

Defining the organization's risk management framework

Which of the following is BEST to include in a business case when the return on investment (ROI) for an information security initiative is difficult to calculate?

Projected Increase in maturity level

Estimated increase in efficiency

Which of the following is the MOST important issue in a penetration test?

Having a defined goal as well as success and failure criteria

Having an independent group perform the test

Obtaining permission from audit

Performing the test without the benefit of any insider knowledge

Having a defined goal as well as success and failure criteria

Which of the following is the MOST important consideration when determining which type of failover site to employ?

Recovery time objectives (RTOs)

What should be an information security manager's FIRST step when developing a business case for a new intrusion detection system (IDS) solution?

Define the issues to be addressed.

Perform a cost-benefit analysis.

Calculate the total cost of ownership (TCO).

Which of the following metrics provides the BEST evidence of alignment of information security governance with corporate governance?

Average return on investment (ROI) associated with security initiatives

Average number of security incidents across business units

Mean time to resolution (MTTR) for enterprise-wide security incidents

Number of vulnerabilities identified for high-risk information assets

A daily monitoring report reveals that an IT employee made a change to a firewall rule outside of the change control process. The information security manager's FIRST step in addressing the issue should be to:

perform an analysis of the change

require that the change be reversed

review the change management process

perform an analysis of the change

report the event to senior management

Which of the following BEST enables an organization to enhance its incident response plan processes and procedures?

Key performance indicators (KPIs)

Which of the following BEST facilitates effective strategic alignment of security initiatives?

Organizational units contribute to and agree on priorities

The business strategy is periodically updated

Procedures and standards are approved by department heads.

Periodic security audits are conducted by a third-party.

Organizational units contribute to and agree on priorities

Which of the following is MOST important for the effective implementation of an information security governance program?

The program goals are communicated and understood by the organization.

Employees receive customized information security training

The program budget is approved and monitored by senior management

The program goals are communicated and understood by the organization.

Information security roles and responsibilities are documented.

Of the following, who is accountable for data loss in the event of an information security incident at a third-party provider?

The information security manager

The service provider that hosts the data

Which of the following BEST describes a buffer overflow?

A function is carried out with more data than the function can handle

A program contains a hidden and unintended function that presents a security risk

Malicious code designed to interfere with normal operations

A type of covert channel that captures data

Which of the following is the BEST method for determining whether a firewall has been configured to provide a comprehensive perimeter defense9

A validation of the current firewall rule set

A port scan of the firewall from an internal source

A ping test from an external source

A simulated denial of service (DoS) attack against the firewall

Which of the following BEST enables an organization to maintain legally admissible evidence7

Chain of custody forms with points of contact

Documented processes around forensic records retention

Robust legal framework with notes of legal actions

Chain of custody forms with points of contact

Forensic personnel training that includes technical actions

Which of the following would be the GREATEST threat posed by a distributed denial of service (DDoS) attack on a public-facing web server?

Prevention of authorized access

Execution of unauthorized commands

Prevention of authorized access

Unauthorized access to resources

Which of the following should an information security manager do FIRST when creating an organization's disaster recovery plan (DRP)?

Conduct a business impact analysis (BIA)

Identify the response and recovery learns.

Review the communications plan.

Develop response and recovery strategies.

Regular vulnerability scanning on an organization's internal network has identified that many user workstations have unpatched versions of software. What is the BEST way for the information security manager to help senior management understand the related risk?

Include the impact of the risk as part of regular metrics.

Recommend the security steering committee conduct a review.

Update the risk assessment at regular intervals

Send regular notifications directly to senior managers

An incident management team leader sends out a notification that the organization has successfully recovered from a cyberattack. Which of the following should be done NEXT?

Conduct a meeting to capture lessons learned.

Prepare an executive summary for senior management

Gather feedback on business impact

Conduct a meeting to capture lessons learned.

Secure and preserve digital evidence for analysis.

The contribution of recovery point objective (RPO) to disaster recovery is to:

eliminate single points of failure.

reduce mean time between failures (MTBF).

Senior management has just accepted the risk of noncompliance with a new regulation What should the information security manager do NEX*P

Update details within the risk register.

Report the decision to the compliance officer

Update details within the risk register.

Reassess the organization's risk tolerance.

Assess the impact of the regulation.

The PRIMARY goal of the eradication phase in an incident response process is to:

remove the threat and restore affected systems

maintain a strict chain of custody.

provide effective triage and containment of the incident.

remove the threat and restore affected systems

obtain forensic evidence from the affected system.

Which of the following is the BEST option to lower the cost to implement application security controls?

Integrate security activities within the development process

Perform security tests in the development environment.

Integrate security activities within the development process

Perform a risk analysis after project completion.

Include standard application security requirements

Which of the following would provide the MOST effective security outcome in an organizations contract management process?

Ensuring security requirements are defined at the request-for-proposal (RFP) stage

Performing vendor security benchmark analyses at the request-for-proposal (RFP) stage

Ensuring security requirements are defined at the request-for-proposal (RFP) stage

Extending security assessment to cover asset disposal on contract termination

Extending security assessment to include random penetration testing

Which of the following should be done FIRST when implementing a security program?

Create an information asset inventory.

Determine the value of information assets.

Which of the following is MOST important to include in an information security status report management?

Review of information security policies

information security budget requests

An employee clicked on a link in a phishing email, triggering a ransomware attack Which of the following should be the information security?

Isolate the impacted endpoints.

After a server has been attacked, which of the following is the BEST course of action?

Review vulnerability assessment.

Which of the following is the GREATEST concern resulting from the lack of severity criteria in incident classification?

Escalation procedures will be ineffective.

Statistical reports will be incorrect.

The service desk will be staffed incorrectly.

Escalation procedures will be ineffective.

Timely detection of attacks will be impossible.

In a call center, the BEST reason to conduct a social engineering is to:

Identify candidates for additional security training.

minimize the likelihood of successful attacks.

gain funding for information security initiatives.

To ensure that a new application complies with information security policy, the BEST approach is to:

perform a vulnerability analysis.

review the security of the application before implementation.

integrate functionality the development stage.

perform a vulnerability analysis.

periodically audit the security of the application.

Isaca CISM Practice Test 9 - Free Online Exam Prep & Questions

The PRIMARY advantage of performing black-box control tests as opposed to white-box control tests is that they:

Become a Premium Member for full access

Unlock Premium Member

Isaca CISM Practice Test 9

Question

Isaca CISM Practice Tests

Practice Tests