[UPDATED 2022] ISACA CISM Questions Prepare with Free Demo of PDF [Q690-Q707]

5/5 - (3 votes)

[UPDATED 2022] ISACA CISM Questions Prepare with Free Demo of PDF

NEW 2022 Certification Sample Questions CISM Dumps & Practice Exam

What Is CISM Certification All About?

Earning CISM, or Certified Information Security Manager, is a credible way to prove your capacity to handle various security programs. Through your expertise, this helps in building a strategic team that complies with the standards set by the company. And as a result of your management, this boosts business productivity for better outcomes and product retention. Furthermore, the certification allows you to transition into a coveted individual in the enterprise leadership scope.

NEW QUESTION 690
After a risk assessment study, a bank with global operations decided to continue doing business in certain regions of the world where identity theft is rampant. The information security manager should encourage the business to:

increase its customer awareness efforts in those regions.

implement monitoring techniques to detect and react to potential fraud.

outsource credit card processing to a third party.

make the customer liable for losses if they fail to follow the bank’s advice.

NEW QUESTION 691
An information security program should be established PRIMARILY on the basis of:

the approved information security strategy.

the approved risk management approach.

data security regulatory requirements.

senior management input

NEW QUESTION 692
Which of the following should be of GREATEST concern to a newly hired information security manager regarding security compliance?

Lack of risk assessments

Lack of standard operating procedures

Lack of security audits

Lack of executive support

NEW QUESTION 693
Which of the following will MOST effectively minimize the chance of inadvertent disclosure of confidential information?

Following the principle of least privilege

Restricting the use of removable media

Applying data classification rules

Enforcing penalties for security policy violations

NEW QUESTION 694
Which of the following is the MOST important process that an information security manager needs to negotiate with an outsource service provider?

The right to conduct independent security reviews

A legally binding data protection agreement

Encryption between the organization and the provider

A joint risk assessment of the system

NEW QUESTION 695
Which of the following should be communicated FIRST to senior management once an information security incident has been contained?

Whether the recovery time objective was met

The initial business impact of the incident

Details on containment activities

A summary of key lessons learned from the incident

NEW QUESTION 696
Following a recent acquisition, an information security manager has been requested to address the outstanding risk reported early in the acquisition process. Which of the following would be the manager’s BEST course of action?

Add the outstanding risk to the acquiring organization’s risk registry.

Re-assess the outstanding risk of the acquired company.

Re-evaluate the risk treatment plan for the outstanding risk.

Perform a vulnerability assessment of the acquired company’s infrastructure.

NEW QUESTION 697
Which of the following is the MOST important influence to the continued success of an organization’s information security strategy?

Information systems

Security processes

Organizational culture

Policy development

NEW QUESTION 698
Which of the following will BEST protect an organization from internal security attacks?

Static IP addressing

Internal address translation

Prospective employee background checks

Employee awareness certification program

NEW QUESTION 699
An information security manager has discovered an external break-in to the corporate network Which of the following actions should be taken FIRST?

Switch on trace logging

Shut down the network

Copy event logs to a different server

isolate the affected portion of the network

NEW QUESTION 700
The GREATEST benefit of using a maturity model when providing security reports to management is that it presents the:

security program priorities to achieve an accepted risk level

level of compliance with internal policy

assessed level of security risk at a particular point in time

current and target security state for the business

NEW QUESTION 701
Which of the following is MOST important in developing a security strategy?

Creating a positive business security environment

Understanding key business objectives

Having a reporting line to senior management

Allocating sufficient resources to information security

NEW QUESTION 702
Which of the following is the MOST effective defense against spear phishing attacks?

Unified threat management

Web filtering

Anti-spam solution

User awareness training

NEW QUESTION 703
A business impact analysis (BIA) is the BEST tool for calculating:

total cost of ownership.

priority of restoration.

annualized loss expectancy (ALE).

residual risk.

NEW QUESTION 704
Which of the following would be the GREATEST threat posed by a distributed denial of service (DDoS) attack on a publicly facing …..

Prevention of authorized access

Execution of unauthorized commands

Defacement of website content

Unauthorized access to resources

NEW QUESTION 705
The MOST important element in achieving executive commitment to an information security governance program is:

a defined security framework

identified business drivers

established security strategies

a process improvement model

NEW QUESTION 706
An organization has a process in place that involves the use of a vendor. A risk assessment was completed during the development of the process. A year after the implementation a monetary decision has been made to use a different vendor. What, if anything, should occur?

Nothing, since a risk assessment was completed during development.

A vulnerability assessment should be conducted.

A new risk assessment should be performed.

The new vendor’s SAS 70 type II report should be reviewed.

NEW QUESTION 707
The valuation of IT assets should be performed by:

an IT security manager.

an independent security consultant.

the chief financial officer (CFO).

the information owner.

CISM Deluxe Study Guide with Online Test Engine: https://www.actualtorrent.com/CISM-questions-answers.html