[Q568-Q586] Best Quality ISACA CISM Exam Questions Real4Prep Realistic Practice Exams [2022]

Rate this post

Best Quality ISACA CISM Exam Questions Real4Prep Realistic Practice Exams [2022]

Critical Information To Certified Information Security Manager Pass the First Time

NO.568 Which of the following is the MOST important management signoff for migrating an order processing system from a test environment to a production environment?

User

Security

Operations

Database

NO.569 Which of the following BEST ensures that security risks will be reevaluated when modifications in application developments are made?

A problem management process

Background screening

A change control process

Business impact analysis (BIA)

NO.570 Which is the BEST way to measure and prioritize aggregate risk deriving from a chain of linked system vulnerabilities?

Vulnerability scans

Penetration tests

Code reviews

Security audits

NO.571 In business-critical applications, user access should be approved by the:

information security manager.

data owner.

data custodian.

business management.

NO.572 Which of the following is the PRIMARY reason for executive management to be involved in establishing an enterprise’s security management framework?

To determine the desired state of enterprise security

To establish the minimum level of controls needed

To satisfy auditors’ recommendations for enterprise security

To ensure industry best practices for enterprise security are followed

NO.573 Which of the following poses the GREATEST risk to the operational effectiveness of an incident response team?

The lack of automated communication channels

The lack of forensic investigation skills

The lack of delegated authority

The lack of a security information and event management (SIEM) system

NO.574 Which of the following would be the MOST important factor to be considered in the loss of mobile equipment with unencrypted data?

Disclosure of personal information

Sufficient coverage of the insurance policy for accidental losses

Intrinsic value of the data stored on the equipment

Replacement cost of the equipment

NO.575 Which of the following is MOST important to establish when developing prioritization processes for events during an incident?

Recovery point objective (RPO)

Recovery time objective (RTO)

Security management approval

Criteria for alerting senior management

NO.576 Which of the following mechanisms is the MOST secure way to implement a secure wireless network?

Filter media access control (MAC) addresses

Use a Wi-Fi Protected Access (WPA2) protocol

Use a Wired Equivalent Privacy (WEP) key

Web-based authentication

NO.577 What should the information security manager do FIRST when end users express that new security controls are too restrictive?

Conduct a business impact analysis (BIA)

Obtain process owner buy-in to remove the controls

Perform a risk assessment on modifying the control environment

Perform a cost-benefit analysis on modifying the control environment

NO.578 Which of the following is the MOST effective solution for preventing individuals external to the organization from modifying sensitive information on a corporate database?

Screened subnets

Information classification policies and procedures

Role-based access controls

Intrusion detection system (IDS)

NO.579 Which of the following reports would provide the BEST overview of the progress of an information security program to senior management?

Inventory of information technology security controls

Heat map of the current risk landscape

Results of the last penetration test

Key performance indicators (KPIs) related to security initiatives

NO.580 Senior management has just accepted the risk of noncompliance with a new regulation. What should the information security manager do NEXT7

Assess the impact of the regulation.

Reassess the organization’s risk tolerance.

Update details within the risk register

Report the decision to the compliance officer.

NO.581 An executive’s personal mobile device used for business purposes is reported lost. The information security manager should respond based on:

the business impact analysis (BIA).

incident classification.

asset management guidelines.

mobile device configuration.

NO.582 To prevent computers on the corporate network from being used as part of a distributed denial of service attack, the information security manager should use:

incoming traffic filtering

outgoing traffic filtering

IT security policy dissemination

rate limiting

NO.583 Which of the following would be the MOST important factor to be considered in the loss of mobile equipment with unencrypted data?

Disclosure of personal information

Sufficient coverage of the insurance policy for accidental losses

Intrinsic value of the data stored on the equipment

Replacement cost of the equipment

NO.584 Within a security governance framework, which of the following is the MOST important characteristic of the information security committee? The committee:

conducts frequent reviews of the security policy

has established relationships with external professionals

has a clearly defined charter and meeting protocols

includes a mix of members from all levels of management

NO.585 A third-party service provider is developing a mobile app for an organization’s customers. Which of the following issues should be of GREATEST concern to the information security management.

Software escrow is not addressed in the contract

The contract has no requirement for secure development practices

The mobile app s programmers are all offshore contractors.

SLAs after deployment are not clearly defined.

NO.586 While conducting a test of a business continuity plan (BCP). which of the following is the MOST important consideration?

The test involves IT members in the test process

The test simulates actual prime-time processing conditions.

The test addresses the critical components

The test is scheduled to reduce operational impact