CISM Practice Test

CISM Practice Test practice questions, page 39 of 50, with answer review and explanations.

Question 191

Which of the following would provide the HIGHEST level of confidence in the integrity of data when sent from one party to another?

  1. Harden the communication infrastructure.
  2. Require files to be digitally signed before they are transmitted.
  3. Enforce multi-factor authentication on both ends of the communication.
  4. Require data to be transmitted over a secure connection.

Question 192

Which of the following is MOST important to the successful implementation of an information security program?

  1. Establishing key performance indicators (KPIs)
  2. Obtaining stakeholder input
  3. Understanding current and emerging technologies
  4. Conducting periodic risk assessments

Question 193

Which of the following is the BEST way to strengthen the alignment of an information security program with business strategy?

  1. Establishing an information security steering committee
  2. Increasing the frequency of control assessments
  3. Providing organizational training on information security policies
  4. Increasing budget for risk assessments

Question 194

Which of the following is necessary to determine what would constitute a disaster for an organization?

  1. Recovery strategy analysis
  2. Backup strategy analysis
  3. Risk analysis
  4. Threat probability analysis

Question 195

Management has announced the acquisition of a new company. The information security manager of the parent company is concerned that conflicting access rights may cause critical information to be exposed during the integration of the two companies. To BEST address this concern, the information security manager should:

  1. escalate concerns for conflicting access rights to management.
  2. review access rights as the acquisition integration occurs.
  3. implement consistent access control standards.
  4. perform a risk assessment of the access rights.