CISM Practice Test practice questions, page 25 of 50, with answer review and explanations.
Question 121
An organization has experienced multiple instances of privileged users misusing their access. Which of the following processes would be MOST helpful in identifying such violations?
Policy exception review
Review of access controls
Security assessment
Log review
Question 122
An information security manager discovers that the organization's new information security policy is not being followed across all departments. Which of the following should be of GREATEST concern to the information security manager?
Business unit management has not emphasized the importance of the new policy.
Different communication methods may be required for each business unit.
The wording of the policy is not tailored to the audience.
The corresponding controls are viewed as prohibitive to business operations.
Question 123
Which of the following is the BEST defense against a brute force attack?
Intruder detection lockout
Time-of-day restrictions
Discretionary access control
Mandatory access control
Question 124
Which of the following is the MOST important reason to involve external forensics experts in evidence collection when responding to a major security breach?
To provide the response team with expert training on evidence handling
To ensure evidence is handled by qualified resources
To prevent evidence from being disclosed to any internal staff members
To validate the incident response process
Question 125
Which of the following is the GREATEST benefit of integrating information security program requirements into vendor management?
The ability to meet industry compliance requirements
The ability to define service level agreements (SLAs)