CISM Practice Test

CISM Practice Test practice questions, page 12 of 50, with answer review and explanations.

Question 56

Which of the following would be an information security manager's PRIMARY challenge when deploying a bring your own device (BYOD) mobile program in an enterprise?

  1. Configuration management
  2. Mobile application control
  3. Inconsistent device security
  4. End user acceptance

Question 57

Company A, a cloud service provider, is in the process of acquiring Company B to gain new benefits by incorporating their technologies within its cloud services. Which of the following should be the PRIMARY focus of Company A's information security manager?

  1. The cost to align to Company A's security policies
  2. The organizational structure of Company B
  3. Company B's security policies
  4. Company A's security architecture

Question 58

Which of the following should be done FIRST when selecting performance metrics to report on the vendor risk management process?

  1. Select the data source.
  2. Review the confidentiality requirements.
  3. Identify the intended audience.
  4. Identify the data owner.

Question 59

Which of the following BEST determines what information should be shared with different entities during incident response?

  1. Escalation procedures
  2. Communication plan
  3. Disaster recovery policy
  4. Business continuity plan (BCP)

Question 60

Which of the following is the BEST way to enhance training for incident response teams?

  1. Conduct interviews with organizational units.
  2. Establish incident key performance indicators (KPIs).
  3. Participate in emergency response activities.
  4. Perform post-incident reviews.