CISM Practice Online

Question 1

An organization is the victim or a targeted attack and is unaware of the compromise until a security analyst notices an additional user account on the firewall. The implementation of which of the following would have detected the incident?

A : Web-application firewall

B : Security information and event management (SIEM)

C : Data leakage prevention (DLP)

D : Network access control

Answer: B

Question 2

An organization that conducts business globally is planning to utilize a third-party service provider to process payroll information. Which of the following issues poses the GREATEST risk to the organization?

A : The third party has not provided evidence of compliance with local regulations where data is generated.

B : The third party does not have an independent assessment of controls available for review.

C : The third party’s service level agreement (SLA) does not include guarantees of uptime.

D : The third-party contract does not include an indemnity clause for compensation in the event of a breach.

Answer: D

Question 3

An information security manager has been asked to determine whether an information security initiative has reduced risk to an acceptable level. Which of the following activities would provide the BEST information for the information security manager to draw a conclusion?

A : Initiating a cost-benefit analysis of the implemented controls

B : Performing a risk assessment

C : Reviewing the risk register

D : Conducting a business impact analysis (BIA)

Answer: A

Question 4

Which of the following BEST ensures timely and reliable access to services?

A : Authenticity

B : Availability

C : Nonrepudiation

D : Recovery time objective (RTO)

Answer: B

Question 5

Which of the following BEST protects against phishing attacks?

A : Security strategy training

B : Email filtering

C : Network encryption

D : Application whitelisting

Answer: A

Name:	Certified Information Security Manager
Exam Code:	CISM
Certification:	CISM
Vendor:	Isaca
Total Questions:	921
Last Updated:	May 09, 2024

Download Demo CISM Dumps

Create Account

Password Recovery

Download Demo CISM Dumps

Member Login

Create Account

Password Recovery

CISM Practice Online