CISM Practice Test practice questions, page 7 of 50, with answer review and explanations.
Question 31
Which of the following is the MOST important incident management consideration for an organization subscribing to a cloud service?
Decision on the classification of cloud-hosted data
Expertise of personnel providing incident response
Implementation of a SIEM in the organization
An agreement on the definition of a security incident
Question 32
Which of the following is the BEST way for an organization to determine the maturity level of its information security program?
Review the results of information security awareness testing.
Validate the effectiveness of implemented security controls.
Benchmark the information security policy against industry standards.
Track the trending of information security incidents.
Question 33
An organization has identified an increased threat of external brute force attacks in its environment. Which of the following is the MOST effective way to mitigate this risk to the organization's critical systems?
Increase the frequency of log monitoring and analysis.
Implement a security information and event management system (SIEM).
Increase the sensitivity of intrusion detection systems.
Implement multi-factor authentication.
Question 34
When supporting an organization's privacy officer which of the following is the information security manager's PRIMARY role regarding privacy requirements?
Ensuring appropriate controls are in place
Monitoring the transfer of private data
Determining data classification
Conducting privacy awareness programs
Question 35
The chief information security officer (CISO) has developed an information security strategy, but is struggling to obtain senior management commitment for funds to implement the strategy. Which of the following is the MOST likely reason?
The strategy does not include a cost-benefit analysis.
There was a lack of engagement with the business during development.
The strategy does not comply with security standards.