CISM Practice Test

CISM Practice Test practice questions, page 21 of 50, with answer review and explanations.

Question 101

Which of the following has the GREATEST impact on efforts to improve an organization's security posture?

  1. Well-documented security policies and procedures
  2. Supportive tone at the top regarding security
  3. Regular reporting to senior management
  4. Automation of security controls

Question 102

Which of the following is the BEST strategy to implement an effective operational security posture?

  1. Increased security awareness
  2. Defense in depth
  3. Threat management
  4. Vulnerability management

Question 103

In a cloud technology environment, which of the following would pose the GREATEST challenge to the investigation of security incidents?

  1. Non-standard event logs
  2. Access to the hardware
  3. Data encryption
  4. Compressed customer data

Question 104

The PRIMARY goal of conducting a business impact analysis (BIA) as part of an overall continuity planning process is to:

  1. obtain the support of executive management.
  2. document the disaster recovery process.
  3. map the business process to supporting IT and other corporate resources.
  4. identify critical processes and the degree of reliance on support services.

Question 105

Which of the following is MOST important when selecting an information security metric?

  1. Ensuring the metric is repeatable
  2. Aligning the metric to the IT strategy
  3. Defining the metric in qualitative terms
  4. Defining the metric in quantitative terms