CISM Practice Test

CISM Practice Test practice questions, page 41 of 50, with answer review and explanations.

Question 201

What is the PRIMARY responsibility of the security steering committee?

  1. Implement information security control.
  2. Develop information security policy.
  3. Set direction and monitor performance.
  4. Provide information security training to employees.

Question 202

The PRIMARY objective of a risk response strategy should be:

  1. threat reduction.
  2. senior management buy-in.
  3. appropriate control selection.
  4. regulatory compliance.

Question 203

Which of the following should an information security manager do FIRST after a new cybersecurity regulation has been introduced?

  1. Consult corporate legal counsel.
  2. Conduct a cost-benefit analysis.
  3. Update the information security policy.
  4. Perform a gap analysis.

Question 204

Which of the following is the MOST important security feature an information security manager would need for a mobile device management (MDM) program?

  1. Ability to inventory devices
  2. Ability to remotely wipe devices
  3. Ability to locate devices
  4. Ability to push updates to devices

Question 205

Which of the following is the MOST relevant factor when determining the appropriate escalation process in the incident response plan?

  1. Significance of the affected systems
  2. Number of resources allocated to respond
  3. Resilience capability of the affected systems
  4. Replacement cost of the affected systems