CISM Practice Test

CISM Practice Test practice questions, page 40 of 50, with answer review and explanations.

Question 196

Which of the following metrics provides the BEST measurement of the effectiveness of a security awareness program?

  1. Variance of program cost to allocated budget
  2. The number of security breaches
  3. Mean time between incident detection and remediation
  4. The number of reported security incidents

Question 197

The ULTIMATE responsibility for ensuring the objectives of an information security framework are being met belongs to:

  1. the board of directors.
  2. the information security officer.
  3. the steering committee.
  4. the internal audit manager.

Question 198

Which of the following is MOST likely to affect an organization's ability to respond to security incidents in a timely manner?

  1. Lack of senior management buy-in
  2. Inadequate detective control performance
  3. Misconfiguration of security information and event management (SIEM) tool
  4. Complexity of network segmentation

Question 199

After a server has been attacked, which of the following is the BEST course of action?

  1. Isolate the system.
  2. Initiate incident response.
  3. Conduct a security audit.
  4. Review vulnerability assessment.

Question 200

When establishing classifications of security incidents for the development of an incident response plan, which of the following provides the MOST valuable input?

  1. Business impact analysis (BIA) results
  2. Recommendations from senior management
  3. The business continuity plan (BCP)
  4. Vulnerability assessment results