CISM Practice Test

CISM Practice Test practice questions, page 16 of 50, with answer review and explanations.

Question 76

Which of the following is MOST important for an information security manager to consider when identifying information security resource requirements?

  1. Availability of potential resources
  2. Information security incidents
  3. Current resourcing levels
  4. Information security strategy

Question 77

Which of the following is the MAIN benefit of performing an assessment of existing incident response processes?

  1. Validation of current capabilities
  2. Benchmarking against industry peers
  3. Prioritization of action plans
  4. Identification of threats and vulnerabilities

Question 78

Which of the following BEST describes a buffer overflow?

  1. A type of covert channel that captures data
  2. A function is carried out with more data than the function can handle
  3. Malicious code designed to interfere with normal operations
  4. A program contains a hidden and unintended function that presents a security risk

Question 79

Which of the following is the MOST important consideration when selecting members for an information security steering committee?

  1. Information security expertise
  2. Tenure in the organization
  3. Business expertise
  4. Cross-functional composition

Question 80

Which of the following BEST validates that security controls are implemented in a new business process?

  1. Verify the use of a recognized control framework
  2. Review the process for conformance with information security best practices
  3. Benchmark the process against industry practices
  4. Assess the process according to information security policy