CISM Practice Test

CISM Practice Test practice questions, page 33 of 50, with answer review and explanations.

Question 161

What is the FIRST line of defense against criminal insider activities?

  1. Signing security agreements by critical personnel
  2. Stringent and enforced access controls
  3. Validating the integrity of personnel
  4. Monitoring employee activities

Question 162

The BEST way to report to the board on the effectiveness of the information security program is to present:

  1. a summary of the most recent audit findings.
  2. a report of cost savings from process improvements.
  3. peer-group industry benchmarks.
  4. a dashboard illustrating key performance metrics.

Question 163

An organization's outsourced firewall was poorly configured and allowed unauthorized access that resulted in downtime of 48 hours. Which of the following should be the information security manager's NEXT course of action?

  1. Reconfigure the firewall in accordance with best practices.
  2. Obtain supporting evidence that the problem has been corrected.
  3. Seek damages from the service provider.
  4. Revisit the contract and improve accountability of the service provider.

Question 164

Which is the MOST important requirement when establishing a process for responding to zero-day vulnerabilities?

  1. The IT team updates antivirus signatures on user systems.
  2. The IT team implements an emergency patch deployment process.
  3. Business users stop using the impacted application until a patch is released.
  4. The information security team implements recommended workarounds.

Question 165

An information security manager has determined that the mean time to prioritize information security incidents has increased to an unacceptable level. Which of the following processes would BEST enable the information security manager to address this concern?

  1. Incident classification
  2. Incident response
  3. Forensic analysis
  4. Vulnerability assessment