CISM Certification Exam Dumps Questions in here [Nov-2022]
Updated CISM Exam Practice Test Questions
What is the duration of the CISM Exam
- Length of Examination: 4 hours
- Format: Multiple choices, multiple answers
- Number of Questions: 200
NEW QUESTION 44
Which of the following events generally has the highest information security impact?
- A. Opening a new office
- B. Relocating the data center
- C. Rewiring the network
- D. Merging with another organization
Answer: D
Explanation:
Explanation
Merging with or acquiring another organization causes a major impact on an information security management function because new vulnerabilities and risks are inherited. Opening a new office, moving the data center to a new site, or rewiring a network may have information security risks, but generally comply with corporate security policy and are easier to secure.
NEW QUESTION 45
An organization plans to allow employees to use their own devices on the organization's network. Which of the following is the information security manager's BEST course of action?
- A. Conduct awareness training
- B. Implement automated software
- C. Update the security policy
- D. Assess associated risk
Answer: D
NEW QUESTION 46
Which of the following is MOST likely to result from a properly conducted post-incident review?
- A. Forensic evidence is reviewed and provided to law enforcement
- B. The incident response team discovers inefficiencies m the recovery process.
- C. The cause of the incident is discovered and remediated.
- D. Breach information is provided to the organization's key stakeholders and ussrs.
Answer: B
NEW QUESTION 47
Which of the following BEST reduces the likelihood of leakage of private information via email?
- A. Prohibition on the personal use of email
- B. Email encryption
- C. Strong user authentication protocols
- D. User awareness training
Answer: A
Explanation:
Section: INFORMATION SECURITY PROGRAM MANAGEMENT
NEW QUESTION 48
Which of the following is the MOST important characteristic of an effective security policy?
- A. The policy is aligned to industry best practice.
- B. The policy includes actionable procedures.
- C. The policy provides broad organizational direction.
- D. The policy has been validated by business owners.
Answer: C
NEW QUESTION 49
When developing an information security governance framework, which of the following should be the FIRST activity?
- A. Develop policies and procedures to support the framework.
- B. Develop response measures to detect and ensure the closure of security breaches.
- C. Align the information security program with the organization's other risk and control activities.
- D. Integrate security within the system's devetoojtam life cycle process.
Answer: C
NEW QUESTION 50
Who should decide the extent to which an organization will comply with new cybersecurity regulatory requirements?
- A. Senior management
- B. IT steering committee
- C. Information security manager
- D. Legal counsel
Answer: A
Explanation:
Section: MIXED QUESTIONS
NEW QUESTION 51
Which of the following is the MOST important reason for performing vulnerability assessments periodically?
- A. Technology risks must be mitigated.
- B. The environment changes constantly.
- C. Management requires regular reports.
- D. The current threat levels are being assessed.
Answer: B
Explanation:
Section: INFORMATION SECURITY PROGRAM MANAGEMENT
NEW QUESTION 52
An information security manager has identified the organization is not in compliance with new legislation that will soon be in effect. Which of the following is MOST important to consider when determining additional controls to be implemented?
- A. The cost of noncompliance
- B. The information security policy
- C. The organization's risk appetite
- D. The information security strategy
Answer: A
NEW QUESTION 53
Which of the following should an information security manager perform FIRST when an organization's residual risk has increased?
- A. Implement security measures to reduce the risk.
- B. Transfer the risk to third parties.
- C. Communicate the information to senior management.
- D. Assess the business impact.
Answer: D
NEW QUESTION 54
A new regulation for safeguarding information processed by a specific type of transaction has come to the attention of an information security officer. The officer should FIRST:
- A. assess whether existing controls meet the regulation.
- B. meet with stakeholders to decide how to comply.
- C. analyze key risks in the compliance process.
- D. update the existing security/privacy policy.
Answer: A
Explanation:
Explanation/Reference:
Explanation:
If the organization is in compliance through existing controls, the need to perform other work related to the regulation is not a priority. The other choices are appropriate and important; however, they are actions that are subsequent and will depend on whether there is an existing control gap.
NEW QUESTION 55
An information security manager has been asked to determine whether an information security initiative has reduced risk to an acceptable level. Which of the following activities would provide the BEST information for the information security manager to draw a conclusion?
- A. Initiating a cost-benefit analysis of the implemented controls
- B. Conducting a business impact analysis (BIA)
- C. Performing a risk assessment
- D. Reviewing the risk register
Answer: B
NEW QUESTION 56
A successful risk management program should lead to:
- A. containment of losses to an annual budgeted amount.
- B. optimization of risk reduction efforts against cost.
- C. identification and removal of all man-made threats.
- D. elimination or transference of all organizational risks.
Answer: B
Explanation:
Explanation/Reference:
Explanation:
Successful risk management should lead to a breakeven point of risk reduction and cost. The other options listed are not achievable. Threats cannot be totally removed or transferred, while losses cannot be budgeted in advance with absolute certainty.
NEW QUESTION 57
Who is responsible for ensuring that information is classified?
- A. Security manager
- B. Custodian
- C. Senior management
- D. Data owner
Answer: D
Explanation:
The data owner is responsible for applying the proper classification to the data. Senior management is ultimately responsible for the organization. The security officer is responsible for applying security protection relative to the level of classification specified by the owner. The technology group is delegated the custody of the data by the data owner, but the group does not classify the information.
NEW QUESTION 58
Prior to having a third party perform an attack and penetration test against an organization, the MOST important action is to ensure that:
- A. the technical staff has been briefed on what to expect.
- B. goals and objectives are clearly defined.
- C. special backups of production servers are taken.
- D. the third party provides a demonstration on a test system.
Answer: B
Explanation:
Section: INFORMATION SECURITY PROGRAM MANAGEMENT
Explanation:
The most important action is to clearly define the goals and objectives of the test. Assuming that adequate backup procedures are in place, special backups should not be necessary. Technical staff should not be briefed nor should there be a demo as this will reduce the spontaneity of the test.
NEW QUESTION 59
In designing a backup strategy that will be consistent with a disaster recovery strategy, the PRIMARY factor to be taken into account will be the:
- A. recovery' time objective (RTO).
- B. volume of sensitive data.
- C. interruption window.
- D. recovery point objective (RPO).
Answer: D
Explanation:
Explanation/Reference:
Explanation:
The recovery point objective (RPO) defines the maximum loss of data (in terms of time) acceptable by the business (i.e., age of data to be restored). It will directly determine the basic elements of the backup strategy frequency of the backups and what kind of backup is the most appropriate (disk-to-disk, on tape, mirroring). The volume of data will be used to determine the capacity of the backup solution. The recovery time objective (RTO)-the time between disaster and return to normal operation-will not have any impact on the backup strategy. The availability to restore backups in a time frame consistent with the interruption window will have to be checked and will influence the strategy (e.g., full backup vs. incremental), but this will not be the primary factor.
NEW QUESTION 60
An organization with multiple data centers has designated one of its own facilities as the recovery site. The MOST important concern is the:
- A. current processing capacity loads at data centers.
- B. differences in logical security at each center.
- C. synchronization of system software release versions.
- D. communication line capacity between data centers.
Answer: A
Explanation:
Explanation/Reference:
Explanation:
If data centers are operating at or near capacity, it may prove difficult to recover critical operations at an alternate data center. Although line capacity is important from a mirroring perspective, this is secondary to having the necessary capacity to restore critical systems. By comparison, differences in logical and physical security and synchronization of system software releases are much easier issues to overcome and are, therefore, of less concern.
NEW QUESTION 61
For event logs to be acceptable for incident investigation, which of the following is MOST important to implement on all systems to establish a proper trail of evidence?
- A. Source confidentiality
- B. Event data integrity
- C. Access to the logs
- D. Time synchronization
Answer: C
NEW QUESTION 62
When an organization is implementing an information security governance program, its board of directors should be responsible for:
- A. reviewing training and awareness programs.
- B. auditing for compliance.
- C. drafting information security policies.
- D. setting the strategic direction of the program.
Answer: D
Explanation:
Explanation
A board of directors should establish the strategic direction of the program to ensure that it is in sync with the company's vision and business goals. The board must incorporate the governance program into the overall corporate business strategy. Drafting information security policies is best fulfilled by someone such as a security manager with the expertise to bring balance, scope and focus to the policies. Reviewing training and awareness programs may best be handled by security management and training staff to ensure that the training is on point and follows best practices. Auditing for compliance is best left to the internal and external auditors to provide an objective review of the program and how it meets regulatory and statutory compliance.
NEW QUESTION 63
The BEST way for an information security manager to understand the critically of an online application is to perform a
- A. business impact analysis (BlA)
- B. vulnerability assessment
- C. business process analysis
- D. threat assessment
Answer: A
NEW QUESTION 64
An application system stores customer confidential data and encryption is not practical. The BEST measure to protect against data disclosure is:
- A. single sign-on.
- B. multi-factor access controls.
- C. nondisclosure agreements (NDA).
- D. regular review of access logs.
Answer: D
NEW QUESTION 65
......
Difficulty in writing CISM Exam
ISACA CISM exam help Candidates in developing their professionals and academic career and It is a very tough task to pass ISACA CISM exam for those Candidates who have not done hard work and get some relevant ISACA CISM exam preparation material. There are many peoples have passed ISACA CISM exam by following these three things such as look for the latest ISACA CISM exam dumps, get relevant ISACA CISM exam dumps and develop their knowledge about ISACA CISM exam new questions. At the same time, it can also stress out some people as they found passing ISACA CISM exam a tough task. It is just a wrong assumption as many of the peoples have passed ISACA CISM exam questions. All you have to do is to work hard, get some relevant ISACA CISM exam preparation material and go thoroughly from them. Actual4Labs is here to help you with this problem. We have the relevant ISACA CISM exam preparation material which are providing the latest ISACA CISM exam questions with the detailed view of every ISACA CISM exam topic. Actual4Labs offered an ISACA CISM exam dumps which are more than enough to pass the ISACA CISM exam questions. We are providing all thing such as ISACA CISM exam dumps, ISACA CISM practice test, and ISACA CISM pdf exam dumps that will help the candidate to pass the exam with good grades.
Pass Isaca Certification CISM Exam With 395 Questions: https://passcollection.actual4labs.com/ISACA/CISM-actual-exam-dumps.html