CISM Practice Test

CISM Practice Test practice questions, page 27 of 50, with answer review and explanations.

Question 131

Which of the following is MOST important to do after a security incident has been verified?

  1. Notify the appropriate law enforcement authorities of the incident.
  2. Follow the escalation process to inform key stakeholders.
  3. Prevent the incident from creating further damage to the organization.
  4. Contact forensic investigators to determine the root cause.

Question 132

Which of the following should be the PRIMARY driver for selecting and implementing appropriate controls to address the risk associated with weak user passwords?

  1. The organization's risk tolerance
  2. The organization's culture
  3. The cost of risk mitigation controls
  4. Direction from senior management

Question 133

Which of the following is MOST important to consider when determining the effectiveness of the information security governance program?

  1. Key performance indicators (KPIs)
  2. Maturity models
  3. Risk tolerance levels
  4. Key risk indicators (KRIs)

Question 134

The business advantage of implementing authentication tokens is that they:

  1. provide nonrepudiation.
  2. reduce overall cost.
  3. reduce administrative workload.
  4. improve access security.

Question 135

In an organization that has several independent security tools including intrusion detection systems (IDSs) and firewalls, which of the following is the BEST way to ensure timely detection of incidents?

  1. Implement a log aggregation and correlation solution.
  2. Ensure that the incident response plan is endorsed by senior management.
  3. Ensure staff are cross trained to manage all security tools.
  4. Outsource the management of security tools to a service provider.