CISM Practice Test

CISM Practice Test practice questions, page 15 of 50, with answer review and explanations.

Question 71

When monitoring the security of a web-based application, which of the following is MOST frequently reviewed?

  1. Audit reports
  2. Access logs
  3. Access lists
  4. Threat metrics

Question 72

Which of the following is the MOST effective way for an information security manager to ensure that security is incorporated into an organization's project development processes?

  1. Develop good communications with the project management office (PMO).
  2. Participate in project initiation, approval, and funding.
  3. Conduct security reviews during design, testing, and implementation.
  4. Integrate organization's security requirements into project management.

Question 73

Which of the following provides the MOST relevant information to determine the overall effectiveness of an information security program and underlying business processes?

  1. SWOT analysis
  2. Industry benchmarks
  3. Cost-benefit analysis
  4. Balanced scorecard

Question 74

An organization finds unauthorized software has been installed on a number of workstations. The software was found to contain a Trojan, which had been uploading data to an unknown external party. Which of the following would have BEST prevented the installation of the unauthorized software?

  1. Banning executable file downloads at the Internet firewall
  2. Implementing an intrusion detection system (IDS)
  3. Implementing application blacklisting
  4. Removing local administrator rights

Question 75

When developing a tabletop test plan for incident response testing, the PRIMARY purpose of the scenario should be to:

  1. measure management engagement as part of an incident response team.
  2. provide participants with situations to ensure understanding of their roles.
  3. give the business a measure of the organization's overall readiness.
  4. challenge the incident response team to solve the problem under pressure.