Home / Isaca / CISM

Question list

List of questions

Question 1

(0)

An organization finds it necessary to quickly shift to a work-fromhome model with an increased need for remote access security. Which of the following should be given immediate focus?

Question 2

(0)

Which of the following is MOST important to ensuring information stored by an organization is protected appropriately?

Question 3

(0)

Which of the following BEST enables an information security manager to determine the comprehensiveness of an organization's information security strategy?

Question 4

(0)

Which of the following is the MOST important factor of a successful information security program?

Question 5

(0)

Which of the following is the BEST approach when creating a security policy for a global organization subject to varying laws and regulations?

Question 6

(0)

Which of the following presents the GREATEST challenge to the recovery of critical systems and data following a ransomware incident?

Question 7

(0)

Which of the following change management procedures is MOST likely to cause concern to the information security manager?

Question 8

(0)

Which of the following is an example of risk mitigation?

Question 9

(0)

Which of the following is MOST important to include in an incident response plan to ensure incidents are responded to by the appropriate individuals?

Question 10

(0)

The PRIMARY objective of a post-incident review of an information security incident is to:

Question 348 - CISM discussion

An organization's information security manager is performing a post-incident review of a security incident in which the following events occurred:

* A bad actor broke into a business-critical FTP server by brute forcing an administrative password

* The third-party service provider hosting the server sent an automated alert message to the help desk, but was ignored

* The bad actor could not access the administrator console, but was exposed to encrypted data transferred to the server

* After three hours, the bad actor deleted the FTP directory, causing incoming FTP attempts by legitimate customers to fail

Which of the following could have been prevented by conducting regular incident response testing?

Ignored alert messages

The server being compromised

The brute force attack

Stolen data

Show Answer

asked 01/10/2024

Anthony Bradley

43 questions

Your answer: A B C D

0 comments

Sorted by