CISM Practice Test

CISM Practice Test practice questions, page 45 of 50, with answer review and explanations.

Question 221

Which of the following would BEST help an organization's ability to manage advanced persistent threats (APT)?

  1. Having a skilled information security team
  2. Increasing the information security budget
  3. Using multiple security vendors
  4. Having network detection tools in place

Question 222

An employee has just reported the loss of a personal mobile device containing corporate information. Which of the following should the information security manager do FIRST?

  1. Initiate incident response.
  2. Initiate a device reset.
  3. Conduct a risk assessment.
  4. Disable remote access.

Question 223

An organization has fallen victim to a spear-phishing attack that compromised the multi-factor authentication code. What is the information security manager's MOST important follow-up action?

  1. Communicate the threat to users.
  2. Install client anti-malware solutions.
  3. Implement firewall blocking of known attack signatures.
  4. Implement an advanced email filtering system.

Question 224

Which of the following is MOST important for an information security manager to communicate to stakeholders when approving exceptions to the information security policy?

  1. Impact on the risk profile
  2. Need for compensating controls
  3. Time period for review
  4. Requirements for senior management reporting

Question 225

To implement effective continuous monitoring of IT controls, an information security manager needs to FIRST ensure:

  1. security alerts are centralized.
  2. periodic scanning of IT systems is in place.
  3. metrics are communicated to senior management.
  4. information assets have been classified.