Free CISM – Certified Information Security Manager Practice Test Question

Select an option, then click Submit answer.

• ○

  The program follows industry best practices.

• ○

  The program is based on a well-developed strategy.

• ○

  The program is cost-efficient and within budget,

• ○

  The program is focused on risk management.

Select an option, then click Submit answer.

• ○

  Follow the escalation process.

• ○

  Identify the indicators of compromise.

• ○

  Notify law enforcement.

• ○

  Contact forensic investigators.

Select an option, then click Submit answer.

• ○

  A security steering committee including IT representation

• ○

  A consistent risk management approach

• ○

  An information security risk register

• ○

  Integration of security reporting into corporate reporting

Select an option, then click Submit answer.

• ○

  Periodic compliance audits

• ○

  Strong management support

• ○

  Robust technical security controls

• ○

  Incentives for security incident reporting
  

Select an option, then click Submit answer.

• ○

  Including all business units in testing

• ○

  Simulating realistic test scenarios

• ○

  Reviewing test results quarterly

• ○

  Testing after major business changes

Select an option, then click Submit answer.

• ○

  major business processes have been redesigned.

• ○

  the business continuity plan (BCP) has been updated.

• ○

  the security risk profile has been reviewed

• ○

  noncompliance incidents have been filed.

Select an option, then click Submit answer.

• ○

  Provide a baseline for optimizing the security profile of the organization.

• ○

  Demonstrate senior management commitment.

• ○

  Demonstrate compliance with industry best practices to external stakeholders.

• ○

  Ensure that users comply with the organization's information security policies.
  

Select an option, then click Submit answer.

• ○

  Collect additional metrics.

• ○

  Perform a cost-benefit analysis.

• ○

  Submit funding request to senior management.

• ○

  Begin due diligence on the outsourcing company.

Select an option, then click Submit answer.

• ○

  Senior management commitment

• ○

  A business continuity plan (BCP)

• ○

  An established escalation process

• ○

  Defined levels of severity

Select an option, then click Submit answer.

• ○

  Well-decumented information security policies and standards

• ○

  An information security steering committee with business representation

• ○

  Clear lines of authority across the organization

• ○

  Senior management approval of the information security strategy

Select an option, then click Submit answer.

• ○

  Regulations and standards

• ○

  People and culture

• ○

  Executive and board directives

• ○

  Processes and technology

Select an option, then click Submit answer.

• ○

  Review independent security assessment reports for each vendor.

• ○

  Benchmark each vendor's services with industry best practices.

• ○

  Analyze the risks and propose mitigating controls.

• ○

  Define information security requirements and processes.

Select an option, then click Submit answer.

• ○

  Strong senior management support

• ○

  Gomputer-based training

• ○

  Arobust incident response program

• ○

  Adequate security funding

Select an option, then click Submit answer.

• ○

  Adopt the cloud provider's incident response procedures.

• ○

  Transfer responsibility for incident response to the cloud provider.

• ○

  Continue using the existing incident response procedures.

• ○

  Revise incident response procedures to encompass the cloud environment.

Select an option, then click Submit answer.

• ○

  Conduct an impact assessment.

• ○

  Isolate the affected systems.

• ○

  Rebuild the affected systems.

• ○

  Initiate incident response.