CISM Practice Test

CISM Practice Test practice questions, page 10 of 50, with answer review and explanations.

Question 46

Which of the following is the MOST effective method of preventing deliberate internal security breaches?

  1. Well-designed intrusion detection system (IDS)
  2. Biometric security access control
  3. Well-designed firewall system
  4. Screening prospective employees

Question 47

When designing security controls, it is MOST important to:

  1. focus on preventive controls.
  2. apply controls to confidential information.
  3. evaluate the costs associated with the controls.
  4. apply a risk-based approach.

Question 48

An information security team plans to increase password complexity requirements for a customer-facing site, but there are concerns it will negatively impact the user experience. Which of the following is the information security manager's BEST course of action?

  1. Evaluate business compensating controls.
  2. Quantify the security risk to the business.
  3. Assess business impact against security risk.
  4. Conduct industry benchmarking.

Question 49

Which of the following is the PRIMARY responsibility of an information security manager in an organization that is implementing the use of company-owned mobile devices in its operations?

  1. Review and update existing security policies.
  2. Enforce passwords and data encryption on the devices.
  3. Conduct security awareness training.
  4. Require remote wipe capabilities for devices.

Question 50

Which of the following would be MOST useful to help senior management understand the status of information security compliance?

  1. Key performance indicators (KPIs)
  2. Risk assessment results
  3. Industry benchmarks
  4. Business impact analysis (BIA) results