CISM Practice Test

CISM Practice Test practice questions, page 23 of 50, with answer review and explanations.

Question 111

Which of the following is the BEST course of action if the business activity residual risk is lower than the acceptable risk level?

  1. Update the risk assessment framework.
  2. Monitor the effectiveness of controls.
  3. Review the risk probability and impact.
  4. Review the inherent risk level.

Question 112

The BEST way to avoid session hijacking is to use:

  1. strong password controls.
  2. a firewall.
  3. a reverse lookup.
  4. a secure protocol.

Question 113

A critical server for a hospital has been encrypted by ransomware. The hospital is unable to function effectively without this server. Which of the following would MOST effectively allow the hospital to avoid paying the ransom?

  1. A continual server replication process
  2. Employee training on ransomware
  3. A properly tested offline backup system
  4. A properly configured firewall

Question 114

Which of the following functions is MOST critical when initiating the removal of system access for terminated employees?

  1. Help desk
  2. Legal
  3. Information security
  4. Human resources (HR)

Question 115

The authorization to transfer the handling of an internal security incident to a third-party support provider is PRIMARILY defined by the:

  1. escalation procedures.
  2. information security manager.
  3. chain of custody.
  4. disaster recovery plan (DRP).