CISM Practice Test

CISM Practice Test practice questions, page 48 of 50, with answer review and explanations.

Question 236

Which of the following will MOST effectively minimize the chance of inadvertent disclosure of confidential information?

  1. Applying data classification rules
  2. Following the principle of least privilege
  3. Restricting the use of removable media
  4. Enforcing penalties for security policy violations

Question 237

Which type of control is an incident response team?

  1. Detective
  2. Directive
  3. Corrective
  4. Preventive

Question 238

It is MOST important for an information security manager to ensure that security risk assessments are performed:

  1. during a root cause analysis.
  2. as part of the security business case.
  3. consistently throughout the enterprise.
  4. in response to the threat landscape.

Question 239

Which of the following BEST indicates the effectiveness of the vendor risk management process?

  1. Increase in the percentage of vendors certified to a globally recognized security standard
  2. Increase in the percentage of vendors with a completed due diligence review
  3. Increase in the percentage of vendors conducting mandatory security training
  4. Increase in the percentage of vendors that have reported security breaches

Question 240

An organization has decided to store production data in a cloud environment. What should be the FIRST consideration?

  1. Data transfer
  2. Data classification
  3. Data backup
  4. Data isolation