CISM Practice Test

CISM Practice Test practice questions, page 3 of 50, with answer review and explanations.

Question 11

Which of the following is the BEST method to protect consumer private information for an online public website?

  1. Apply strong authentication to online accounts
  2. Encrypt consumer data in transit and at rest
  3. Use secure encrypted transport layer
  4. Apply a masking policy to the consumer data

Question 12

Which of the following is the MOST important consideration in a bring your own device (BYOD) program to protect company data in the event of a loss?

  1. The ability to remotely locate devices
  2. The ability to centrally manage devices
  3. The ability to restrict unapproved applications
  4. The ability to classify types of devices

Question 13

An information security manager has been asked to determine whether an information security initiative has reduced risk to an acceptable level. Which of the following activities would provide the BEST information for the information security manager to draw a conclusion?

  1. Initiating a cost-benefit analysis of the implemented controls
  2. Performing a risk assessment
  3. Reviewing the risk register
  4. Conducting a business impact analysis (BIA)

Question 14

An organization that uses external cloud services extensively is concerned with risk monitoring and timely response. The BEST way to address this concern is to ensure:

  1. the availability of continuous technical support.
  2. appropriate service level agreements (SLAs) are in place.
  3. a right-to-audit clause is included in contracts.
  4. internal security standards are in place.

Question 15

Which of the following is the BEST way to ensure that organizational security policies comply with data security regulatory requirements?

  1. Obtain annual sign-off from executive management.
  2. Align the policies to the most stringent global regulations.
  3. Send the policies to stakeholders for review.
  4. Outsource compliance activities.