[Aug-2021] Verified ISACA Exam Dumps with CISM Exam Study Guide
Best Quality ISACA CISM Exam Questions ActualTorrent Realistic Practice Exams [2021]
NEW QUESTION 146
Senior management commitment and support for information security will BEST be attained by an information security manager by emphasizing:
- A. organizational risk.
- B. the responsibilities of organizational units.
- C. security needs.
- D. organization wide metrics.
Answer: A
Explanation:
Information security exists to help the organization meet its objectives. The information security manager should identify information security needs based on organizational needs. Organizational or business risk should always take precedence. Involving each organizational unit in information security and establishing metrics to measure success will be viewed favorably by senior management after the overall organizational risk is identified.
NEW QUESTION 147
Which of the following is the MOST beneficial outcome of testing an incident response plan?
- A. Incident response time is improved.
- B. The plan is enhanced to reflect the findings of the test
- C. The response includes escalation to senior management
- D. Test plan results are documented.
Answer: A
NEW QUESTION 148
When developing an information security governance framework, which of the following should be the FIRST activity?
- A. Integrate security within the system's development life-cycle process.
- B. Develop response measures to detect and ensure the closure of security breaches.
- C. Align the information security program with the organization's other risk and control activities.
- D. Develop policies and procedures to support the framework.
Answer: C
Explanation:
Section: INFORMATION SECURITY GOVERNANCE
NEW QUESTION 149
Which of the following should be an information security manager's PRIMARY tole when an organization initiates a data classification process?
- A. Assign the asset classification level.
- B. Apply security in accordance with specific classification.
- C. Verify that assets have been appropriately classified.
- D. Define the classification structure to be implemented.
Answer: D
NEW QUESTION 150
Which would be one of the BEST metrics an information security manager can employ to effectively evaluate the results of a security program?
- A. Percent of control objectives accomplished
- B. Reduction in the number of reported security incidents
- C. Number of controls implemented
- D. Percent of compliance with the security policy
Answer: A
Explanation:
Section: INFORMATION RISK MANAGEMENT
Explanation:
Control objectives are directly related to business objectives; therefore, they would be the best metrics.
Number of controls implemented does not have a direct relationship with the results of a security program.
Percentage of compliance with the security policy and reduction in the number of security incidents are not as broad as choice B.
NEW QUESTION 151
Which of the following is the BEST reason to separate short-term from long-term plans within an information security roadmap?
- A. To allow for reactive initiatives
- B. To allocate resources for initiatives
- C. To facilitate business plan reporting to management
- D. To update the roadmap according to current risks
Answer: A
NEW QUESTION 152
Which of the following would BEST mitigate identified vulnerabilities in a timely manner?
- A. Continuous vulnerability monitoring tool
- B. Action plan with responsibilities and deadlines
- C. Categorization of the vulnerabilities based on system's criticality
- D. Monitoring of key risk indicators (KRIs)
Answer: D
Explanation:
Explanation
Explanations
One approach seeing increasing use is to report and monitor risk through the use of key risk indicators (KRIs).
KRIs can be defined as measures that, in some manner, indicate when an enterprise is subject to risk that exceeds a defined risk level. Typically, these indicators are trends in factors known to increase risk and are generally developed based on experience. They can be as diverse as increasing absenteeism or increased turnover in key employees to rising levels of security events or incidents.
NEW QUESTION 153
Which of the following BEST supports effective information security governance"*
- A. A steering committee is established
- B. The information security manager develops the strategy
- C. Compliance with regulations is demonstrated.
- D. A baseline risk assessment is performed.
Answer: A
NEW QUESTION 154
Which of the following is the MOST important step in risk ranking?
- A. Mitigation cost
- B. Vulnerability analysis
- C. Impact assessment
- D. Threat assessment
Answer: C
Explanation:
Section: INFORMATION RISK MANAGEMENT
Explanation
NEW QUESTION 155
Emergency actions are taken at the early stage of a disaster with the purpose of preventing injuries or loss of life and:
- A. reducing the extent of operational damage.
- B. ensuring orderly plan activation.
- C. determining the extent of property damage.
- D. preserving environmental conditions.
Answer: A
Explanation:
Explanation
During an incident, emergency actions should minimize or eliminate casualties and damage to the business operation, thus reducing business interruptions. Determining the extent of property damage is not the consideration; emergency actions should minimize, not determine, the extent of the damage.
Protecting/preserving environmental conditions may not be relevant. Ensuring orderly plan activation is important but not as critical as reducing damage to the operation.
NEW QUESTION 156
The MAIN reason why asset classification is important to a successful information security program is because classification determines:
- A. the priority and extent of risk mitigation efforts.
- B. the appropriate level of protection to the asset.
- C. the amount of insurance needed in case of loss.
- D. how protection levels compare to peer organizations.
Answer: B
Explanation:
Protection should be proportional to the value of the asset. Classification is based upon the value of the asset to the organization. The amount of insurance needed in case of loss may not be applicable in each case. Peer organizations may have different classification schemes for their assets.
NEW QUESTION 157
An organization has announced new initiatives to establish a big data platform and develop mobile apps. What is the FIRST step when defining new human resource requirements?
- A. Benchmark to an industry peer
- B. Analyze the skills necessary to support the new initiatives.
- C. Determine the security technology requirements for the initiatives
- D. Request additional funding for recruiting and training
Answer: B
NEW QUESTION 158
When creating security baselines, it is MOST important to:
- A. identify critical systems storing sensitive data
- B. establish consistent enterprise-wide controls
- C. establish maximum security requirements.
- D. demonstrate adherence to compliance criteria
Answer: D
NEW QUESTION 159
An information security manager is asked to provide a short presentation on the organization's current IT risk posture to the board of directors. Which of the following would be MOST effective To include in this presentation?
- A. Risk heat map
- B. Threat assessment results
- C. Risk register
- D. Gap analysis results
Answer: D
NEW QUESTION 160
From a business perspective the MOST important function of information security is to support:
- A. security awareness
- B. international standards
- C. predictable operations.
- D. corporate policy
Answer: C
NEW QUESTION 161
An unauthorized user gained access to a merchant's database server and customer credit card information. Which of the following would be the FIRST step to preserve and protect unauthorized intrusion activities?
- A. Shut down and power off the server.
- B. Isolate the server from the network.
- C. Duplicate the hard disk of the server immediately.
- D. Copy the database log file to a protected server.
Answer: B
Explanation:
Isolating the server will prevent further intrusions and protect evidence of intrusion activities left in memory and on the hard drive. Some intrusion activities left in virtual memory may be lost if the system is shut down. Duplicating the hard disk will only preserve the evidence on the hard disk, not the evidence in virtual memory, and will not prevent further unauthorized access attempts. Copying the database log file to a protected server will not provide sufficient evidence should the organization choose to pursue legal recourse.
NEW QUESTION 162
An internal audit has identified major weaknesses over IT processing. Which of the following should an information security manager use to BEST convey a sense of urgency to management?
- A. Security metrics reports
- B. Risk assessment reports
- C. Return on security investment report
- D. Business impact analysis (BIA)
Answer: B
Explanation:
Explanation
Performing a risk assessment will allow the information security manager to prioritize the remedial measures and provide a means to convey a sense of urgency to management. Metrics reports are normally contained within the methodology of the risk assessment to give it credibility and provide an ongoing tool. The business impact analysis (BIA) covers continuity risks only. Return on security investment cannot be determined until a plan is developed based on the BIA.
NEW QUESTION 163
Which of the following practices completely prevents a man-in-the-middle (MitM) attack between two hosts?
- A. Use https with a server-side certificate
- B. Enforce static media access control (MAC) addresses
- C. Connect through an IPSec VPN
- D. Use security tokens for authentication
Answer: C
Explanation:
Section: INFORMATION SECURITY PROGRAM DEVELOPMENT
Explanation
Explanation:
IPSec effectively prevents man-in-the-middle (MitM) attacks by including source and destination IPs within the encrypted portion of the packet. The protocol is resilient to MitM attacks. Using token-based authentication does not prevent a MitM attack; however, it may help eliminate reusability of stolen cleartext credentials. An https session can be intercepted through Domain Name Server (DNS) or Address Resolution Protocol (ARP) poisoning. ARP poisoning - a specific kind of MitM attack - may be prevented by setting static media access control (MAC) addresses. Nevertheless, DNS and NetBIOS resolution can still be attacked to deviate traffic.
NEW QUESTION 164
Which of the following is the MOST important item to include when developing web hosting agreements with third-party providers?
- A. Liability limits
- B. Service levels
- C. Termination conditions
- D. Privacy restrictions
Answer: B
Explanation:
Service levels are key to holding third parties accountable for adequate delivery of services. This is more important than termination conditions, privacy restrictions or liability limitations.
NEW QUESTION 165
......
Authentic Best resources for CISM: https://www.actualtorrent.com/CISM-questions-answers.html
CISM Test Engine Practice Exam: https://drive.google.com/open?id=1ACpZvDzh-PEdsFf6E1gYXOomyb5t0V_N