Home / Isaca / CISM

Isaca CISM Practice Test - Questions Answers, Page 78

Question list

List of questions

Question 771

(0)

An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization's CEO in an attempt to commit wire transfer fraud. Which of the f

Question 772

(0)

Which of the following is the BEST indication of an effective disaster recovery planning process?

Question 773

(0)

Which of the following is MOST important for the information security manager to include when presenting changes in the security risk profile to senior management?

Question 774

(0)

Following an unsuccessful denial of service (DoS) attack, identified weaknesses should be:

Question 775

(0)

The PRIMARY reason to properly classify information assets is to determine:

Question 776

(0)

Which of the following should be done FIRST when developing a business continuity plan (BCP)?

Question 777

(0)

Which of the following would be the GREATEST obstacle to implementing incident notification and escalation processes in an organization with high turnover?

Question 778

(0)

Which of the following processes is MOST important for the success of a business continuity plan (BCP)?

Question 779

(0)

When analyzing the emerging risk and threat landscape, an information security manager should FIRST:

Question 780

(0)

What should be the NEXT course of action when an information security manager has identified a department that is repeatedly not following the security policy?

Question 771

An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization's CEO in an attempt to commit wire transfer fraud. Which of the following is the BEST way to reduce the risk associated with this type of attack?

Temporarily suspend wire transfers for the organization.

Provide awareness training to the CEO for this type of phishing attack.

Provide awareness training to staff responsible for wire transfers.

Disable emails for staff responsible for wire transfers.

Show Answer Comment (0)

Question 772

Which of the following is the BEST indication of an effective disaster recovery planning process?

Hot sites are required for any declared disaster.

Chain of custody is maintained throughout the disaster recovery process.

Post-incident reviews are conducted after each event.

Recovery time objectives (RTOs) are shorter than recovery point objectives (RPOs).

Show Answer Comment (0)

Question 773

Which of the following is MOST important for the information security manager to include when presenting changes in the security risk profile to senior management?

Industry benchmarks

Security training test results

Performance measures for existing controls

Number of false positives

Show Answer Comment (0)

Question 774

Following an unsuccessful denial of service (DoS) attack, identified weaknesses should be:

quickly resolved and eliminated regardless of cost.

tracked and reported on until their final resolution.

documented in security awareness programs.

noted and re-examined later if similar weaknesses are found.

Show Answer Comment (0)

Question 775

The PRIMARY reason to properly classify information assets is to determine:

appropriate encryption strength using a risk-based approach.

the business impact if assets are compromised.

the appropriate protection based on sensitivity.

user access levels based on the need to know.

Show Answer Comment (0)

Question 776

Which of the following should be done FIRST when developing a business continuity plan (BCP)?

Review current recovery policies.

Define the organizational strategy.

Prioritize the critical processes.

Review existing cyber insurance coverage.

Show Answer Comment (0)

Question 777

Which of the following would be the GREATEST obstacle to implementing incident notification and escalation processes in an organization with high turnover?

Lack of knowledgeable personnel

Lack of communication processes

Lack of process documentation

Lack of alignment with organizational goals

Show Answer Comment (0)

Question 778

Which of the following processes is MOST important for the success of a business continuity plan (BCP)?

Involving all stakeholders in testing and training

Scheduling periodic internal and external audits

Including the board and senior management in plan reviews

Maintaining copies of the plan at the primary and recovery sites

Show Answer Comment (0)

Question 779

When analyzing the emerging risk and threat landscape, an information security manager should FIRST:

determine the impact if threats materialize.

determine the sources of emerging threats.

review historical threats within the industry.

map threats to business assets.

Show Answer Comment (0)

Question 780

What should be the NEXT course of action when an information security manager has identified a department that is repeatedly not following the security policy?

Perform a vulnerability assessment on the systems within the department.

Introduce additional controls to force compliance with policy.

Require department users to repeat security awareness training.

Report the policy violation to senior management.

Show Answer Comment (0)

Total 793 questions