CISM Practice Test

CISM Practice Test practice questions, page 9 of 50, with answer review and explanations.

Question 41

An organization is concerned with the potential for exploitation of vulnerabilities in its server systems. Which of the following is the BEST control to mitigate the associated risk?

  1. Enforcing standard system configurations based on secure configuration benchmarks
  2. Implementing network and system-based anomaly monitoring software for server systems
  3. Enforcing configurations for secure logging and audit trails on server systems
  4. Implementing host-based intrusion detection systems (IDS) on server systems

Question 42

Which of the following is the MOST important step when establishing guidelines for the use of social networking sites in an organization?

  1. Identify secure social networking sites
  2. Establish disciplinary actions for noncompliance
  3. Perform a vulnerability assessment
  4. Define acceptable information for posting

Question 43

Regular vulnerability scanning on an organization's internal network has identified that many user workstations have unpatched versions of software. What is the BEST way for the information security manager to help senior management understand the related risk?

  1. Include the impact of the risk as part of regular metrics.
  2. Send regular notifications directly to senior managers.
  3. Recommend the security steering committee conduct a review.
  4. Update the risk assessment at regular intervals.

Question 44

Which of the following BEST prepares a computer incident response team for a variety of information security scenarios?

  1. Tabletop exercises
  2. Forensics certification
  3. Penetration tests
  4. Disaster recovery drills

Question 45

Which of the following BEST protects against phishing attacks?

  1. Security strategy training
  2. Email filtering
  3. Network encryption
  4. Application whitelisting