CISM Practice Test

CISM Practice Test practice questions, page 14 of 50, with answer review and explanations.

Question 66

An information security manager MUST have an understanding of an information security program?

  1. Understanding current and emerging technologies
  2. Establishing key performance indicators (KPIs)
  3. Conducting periodic risk assessments
  4. Obtaining stakeholder input

Question 67

An attacker was able to gain access to an organization's perimeter firewall and made changes to allow wider external access and to steal data. Which of the following would have BEST provided timely identification of this incident?

  1. Implementing a data loss prevention (DLP) suite
  2. Deploying an intrusion prevention system (IPS)
  3. Deploying a security information and event management system (SIEM)
  4. Conducting regular system administrator awareness training

Question 68

When establishing metrics for an information security program, the BEST approach is to identify indicators that:

  1. support major information security initiatives.
  2. reflect the corporate risk culture.
  3. reduce information security program spending.
  4. demonstrate the effectiveness of the security program.

Question 69

For an organization that provides web-based services, which of the following security events would MOST likely initiate an incident response plan and be escalated to management?

  1. Anti-malware alerts on several employees' workstations
  2. Several port scans of the web server
  3. Multiple failed login attempts on an employee's workstation
  4. Suspicious network traffic originating from the demilitarized zone (DMZ)

Question 70

An information security manager is implementing a bring your own device (BYOD) program. Which of the following would BEST ensure that users adhere to the security standards?

  1. Publish the standards on the intranet landing page.
  2. Deploy a device management solution.
  3. Establish an acceptable use policy.
  4. Monitor user activities on the network.