CISM Practice Test

CISM Practice Test practice questions, page 43 of 50, with answer review and explanations.

Question 211

Following a risk assessment, new countermeasures have been approved by management. Which of the following should be performed NEXT?

  1. Schedule the target end date for implementation activities.
  2. Develop an implementation strategy.
  3. Budget the total cost of implementation activities.
  4. Calculate the cost for each countermeasure.

Question 212

Which of the following is the MOST effective defense against malicious insiders compromising confidential information?

  1. Regular audits of access controls
  2. Strong background checks when hiring staff
  3. Prompt termination procedures
  4. Role-based access control

Question 213

An information security manager is asked to provide a short presentation on the organization's current IT risk posture to the board of directors. Which of the following would be MOST effective to include in this presentation?

  1. Gap analysis results
  2. Risk register
  3. Threat assessment results
  4. Risk heat map

Question 214

Which of the following provides the BEST assurance that a contracted third-party provider meets an organization's security requirements?

  1. Continuous monitoring
  2. Due diligence questionnaires
  3. Right-to-audit clause in the contract
  4. Performance metrics

Question 215

An organization's senior management is encouraging employees to use social media for promotional purposes. Which of the following should be the information security manager s FIRST step to support this strategy?

  1. Incorporate social media into the security awareness program.
  2. Develop a guideline on the acceptable use of social media.
  3. Employ the use of a web content filtering solution.
  4. Develop a business case for a data loss prevention (DLP) solution.