CISM Practice Test

CISM Practice Test practice questions, page 36 of 50, with answer review and explanations.

Question 176

An information security manager notes that security incidents are not being appropriately escalated by the help desk after tickets are logged. Which of the following is the BEST automated control to resolve this issue?

  1. Integrating automated service level agreement (SLA) reporting into the help desk ticketing system
  2. Changing the default setting for all security incidents to the highest priority
  3. Integrating incident response workflow into the help desk ticketing system
  4. Implementing automated vulnerability scanning in the help desk workflow

Question 177

An information security manager's PRIMARY objective for presenting key risks to the board of directors is to:

  1. ensure appropriate information security governance.
  2. quantify reputational risks.
  3. meet information security compliance requirements.
  4. re-evaluate the risk appetite.

Question 178

Which of the following should be the PRIMARY consideration when implementing a data loss prevention (DLP) solution?

  1. Data ownership
  2. Data storage capabilities
  3. Data classification
  4. Selection of tools

Question 179

Which of the following is the MOST important function of an information security steering committee?

  1. Evaluating the effectiveness of information security controls on a periodic basis
  2. Defining the objectives of the information security framework
  3. Conducting regular independent reviews of the state of security in the business
  4. Approving security awareness content prior to publication

Question 180

When determining an acceptable risk level, which of the following is the MOST important consideration?

  1. Vulnerability scores
  2. System criticalities
  3. Risk matrices
  4. Threat profiles