Copiar e Editar

CISM 2014 Questions - 3

Descrição

Certificate CISM Quiz sobre CISM 2014 Questions - 3, criado por Eduardo Castella7911 em 17-02-2016.
Eduardo Castella7911
Quiz por Eduardo Castella7911, atualizado more than 1 year ago
Eduardo Castella7911
Criado por Eduardo Castella7911 mais de 8 anos atrás
2046
3
0

Resumo de Recurso

Questão 1

Questão
Which of the following is MOST important to the successful promotion of good security management practices?
Responda
  • A. Security metrics
  • B. Security baselines
  • C. Management support
  • D. Periodic training

Questão 2

Questão
Which of the following security mechanisms is MOST effective in protecting classified data that have been encrypted to prevent disclosure and transmission outside the organization's network?
Responda
  • A. Configuration of firewalls
  • B. Strength of encryption algorithms
  • C. Authentication within application
  • D. Safeguards over keys

Questão 3

Questão
The PRIMARY objective of a vulnerability assessment is to:
Responda
  • A. reduce risk to the business.
  • B. ensure compliance with security policies.
  • C. provide assurance to management.
  • D. measure efficiency of services provided.

Questão 4

Questão
Which of the following is the GREATEST concern for an organization in which there is a widespread use of mobile devices?
Responda
  • A. There is an undue reliance on public networks.
  • B. Batteries require constant recharges.
  • C. There is a lack of operating system standardization.
  • D. Mobile devices can be easily lost or stolen.

Questão 5

Questão
The director of auditing has recommended a specific information security monitoring solution to the information security manager. What should the information security manager do FIRST?
Responda
  • A. Obtain comparative pricing bids and complete the transaction with the vendor offering the best deal.
  • B. Add the purchase to the budget during the next budget preparation cycle to account for costs.
  • C. Perform an assessment to determine correlation with business goals and objectives.
  • D. Form a project team to plan the implementation.

Questão 6

Questão
Which of the following is the PRIMARY reason to change policies during program development?
Responda
  • A. The policies must comply with new regulatory and legal mandates.
  • B. Appropriate security baselines are no longer set in the policies.
  • C. The policies no longer reflect management intent and direction.
  • D. Employees consistently ignore the policies.

Questão 7

Questão
Which of the following is the MOST effective way to ensure that noncompliance to information security standards is resolved?
Responda
  • A. Periodic audits of noncompliant areas
  • B. An ongoing vulnerability scanning program
  • C. Annual security awareness training
  • D. Regular reports to executive management

Questão 8

Questão
What is the PRIMARY purpose of installing an intrusion detection system (IDS)?
Responda
  • A. To identify weaknesses in network security
  • B. To identify patterns of suspicious access
  • C. To identify how an attack was launched on the network
  • D. To identify potential attacks on the internal network

Questão 9

Questão
Senior management commitment and support for information security can BEST be obtained through presentations that:
Responda
  • A. use illustrative examples of successful attacks.
  • B. explain the technical risks to the organization.
  • C. evaluate the organization against best security practices.
  • D. tie security risks to key business objectives.

Questão 10

Questão
The recovery time objective (RTO) is reached at which of the following milestones?
Responda
  • A. Disaster declaration
  • B. Recovery of the backups
  • C. Restoration of the system
  • D. Return to business as usual processing

Questão 11

Questão
Which of the following approaches would be BEST to address significant system vulnerabilities that were discovered during a network scan?
Responda
  • A. All significant vulnerabilities must be mitigated in a timely fashion.
  • B. Treatment should be based on threat, impact and cost considerations.
  • C. Compensatory controls must be implemented for major vulnerabilities.
  • D. Mitigation options should be proposed for management approval.

Questão 12

Questão
How does knowledge of risk appetite help to increase security control effectiveness?
Responda
  • A. It shows senior management that you understand their needs.
  • B. It provides a basis for redistributing resources to mitigate risk outside the risk tolerance.
  • C. It requires continuous monitoring because the entire risk environment is constantly changing.
  • D. It facilitates communication with management about the importance of security.

Questão 13

Questão
Which of the following is the MOST important prerequisite to undertaking asset classification?
Responda
  • A. Threat analysis
  • B. Impact assessment
  • C. Controls evaluation
  • D. Penetration testing

Questão 14

Questão
What is the PRIMARY objective of a risk management program?
Responda
  • A. Minimize inherent risk.
  • B. Eliminate business risk.
  • C. Implement effective controls.
  • D. Reduce residual risk to acceptable levels.

Questão 15

Questão
Where should resource requirements for information security initially be identified?
Responda
  • A. In policies
  • B. In the architecture
  • C. In the strategy
  • D. In procedures

Questão 16

Questão
Which of the following actions should take place immediately after a security breach is reported to an information security manager?
Responda
  • A. Confirm the incident
  • B. Determine impact
  • C. Notify affected stakeholders
  • D. Isolate the incident

Questão 17

Questão
Which of the following benefits that the enterprise receives from employing a systematic incident management program with a formal methodology is MOST important?
Responda
  • A. A formal methodology makes incident management more flexible.
  • B. A formal methodology is more reliant on business continuity activities.
  • C. Each incident responder is able to get broad-based experience.
  • D. Evidence of due diligence supports legal and liability claims.

Questão 18

Questão
Which of the following is the MOST important aspect of forensic investigations that will potentially involve legal action?
Responda
  • A. The independence of the investigator
  • B. Timely intervention
  • C. Identifying the perpetrator
  • D. Chain of custody

Questão 19

Questão
Value at risk (VAR) can be used:
Responda
  • A. as a qualitative approach to evaluating risk.
  • B. to determine maximum probable loss over a period of time.
  • C. for risk analysis applicable only to financial organizations.
  • D. as a useful tool to expedite the assessment process.

Questão 20

Questão
Which of the following is the MOST cost-effective approach to test the security of a legacy application?
Responda
  • A. Identify a similar application and refer to its security weaknesses.
  • B. Recompile the application using the latest library and review the error codes.
  • C. Employ reverse engineering techniques to derive functionalities.
  • D. Conduct a vulnerability assessment to detect application weaknesses.

Questão 21

Questão
As part of system development, how should an organization determine which element of the confidentiality, integrity and availability (CIA) triad requires the MOST protection?
Responda
  • A. It should be based on the threat to each of the elements.
  • B. Availability is most important.
  • C. It should be based on the risk to each of the elements.
  • D. All elements are equally important.

Questão 22

Questão
Tightly integrated IT systems are MOST likely to be affected by:
Responda
  • A. aggregated risk.
  • B. systemic risk.
  • C. operational risk.
  • D. cascading risk.

Questão 23

Questão
During which phase of development is it MOST appropriate to begin assessing the risk of a new application system?
Responda
  • A. Feasibility
  • B. Design
  • C. Development
  • D. Testing

Questão 24

Questão
Which of the following BEST mitigates a situation where an application programmer requires access to production data?
Responda
  • A. Create a separate account for the programmer as a power user.
  • B. Log all of the programmer's activity for review by their supervisor.
  • C. Have the programmer sign a letter accepting full responsibility.
  • D. Perform regular audits of the application.

Questão 25

Questão
What is the MOST important objective of a postincident review?
Responda
  • A. Capture lessons learned to improve the process.
  • B. Develop a process for continuous improvement.
  • C. Develop a business case for the security program budget.
  • D. Identify new incident management tools.

Questão 26

Questão
Which of the following is the BEST metric for evaluating the effectiveness of an intrusion detection mechanism?
Responda
  • A. Number of attacks detected
  • B. Number of successful attacks
  • C. Ratio of false positives to false negatives
  • D. Ratio of successful to unsuccessful attacks

Questão 27

Questão
In a business impact analysis, the value of an information system should be based on the overall:
Responda
  • A. cost of recovery.
  • B. cost to recreate.
  • C. opportunity cost.
  • D. cost of emergency operations.

Questão 28

Questão
An organization has consolidated global operations. The chief information officer (CIO) has asked the chief information security officer (CISO) to develop a new organization information security strategy. Which of the following actions should be taken FIRST?
Responda
  • A. Identify the assets.
  • B. Conduct a risk assessment.
  • C. Define the scope.
  • D. Perform a business impact analysis (BIA).

Questão 29

Questão
Under what circumstances is it MOST appropriate to reduce control strength?
Responda
  • A. Assessed risk is below acceptable levels.
  • B. Risk cannot be determined.
  • C. The control cost is high.
  • D. The control is not effective.

Questão 30

Questão
What is the BEST protocol to ensure confidentiality of transmissions in a business-to-customer (B2C) financial web application?
Responda
  • A. Secure Sockets Layer (SSL)
  • B. Secure Shell (SSH)
  • C. IP Security (IPSec)
  • D. Secure/Multipurpose Internet Mail Extensions (S/MIME)

Questão 31

Questão
What is the PRIMARY basis for the selection and implementation of products to protect the IT infrastructure?
Responda
  • A. Regulatory requirements
  • B. Technical expert advisories
  • C. State-of-the-art technology
  • D. A risk assessment

Questão 32

Questão
What is the PRIMARY basis for the selection of controls and countermeasures?
Responda
  • A. Eliminating IT risk
  • B. Cost-benefit balance
  • C. Resource management
  • D. The number of assets protected

Questão 33

Questão
Of the following, which is the MOST effective way to measure strategic alignment of an information security program?
Responda
  • A. Track audits over time.
  • B. Evaluate incident losses.
  • C. Analyze business cases.
  • D. Interview business owners.

Questão 34

Questão
Which of the following factors BEST helps determine the appropriate protection level for an information asset?
Responda
  • A. The cost of acquisition and implementation of the asset
  • B. Knowledge of vulnerabilities present in the asset
  • C. The degree of exposure to known threats
  • D. The criticality of the business function supported by the asset

Questão 35

Questão
How does a security information and event management (SIEM) solution MOST likely detect the existence of an advanced persistent threat (APT) in its infrastructure?
Responda
  • A. Through analysis of the network traffic history
  • B. Through stateful inspection of firewall packets
  • C. Through identification of zero-day attacks
  • D. Through vulnerability assessments

Questão 36

Questão
The organization has decided to outsource the majority of the IT department with a vendor that is hosting servers in a foreign country. Of the following, which is the MOST critical security consideration?
Responda
  • A. Laws and regulations of the country of origin may not be enforceable in the foreign country.
  • B. A security breach notification might get delayed due to the time difference.
  • C. Additional network intrusion detection sensors should be installed, resulting in an additional cost.
  • D. The company could lose physical control over the server and be unable to monitor the physical security posture of the servers.

Questão 37

Questão
Which of the following ensures that newly identified security weaknesses in an operating system are mitigated in a timely fashion?
Responda
  • A. Patch management
  • B. Change management
  • C. Security baselines
  • D. Acquisition management

Questão 38

Questão
The effectiveness of segregation of duties may be MOST seriously compromised when:
Responda
  • A. user IDs of terminated staff remain active in application systems.
  • B. access privileges are accumulated based on previous job functions.
  • C. application role-based access deviates from the organizational hierarchies.
  • D. role mining tools are used in the access privilege review.

Questão 39

Questão
Why should the analysis of risk include consideration of potential impact?
Responda
  • A. Potential impact is a central element of risk.
  • B. Potential impact is related to asset value.
  • C. Potential impact affects the extent of mitigation.
  • D. Potential impact helps determine the exposure.

Questão 40

Questão
A password hacking tool was used to capture detailed bank account information and personal identification numbers (PINs). Upon confirming the incident, the NEXT step is to:
Responda
  • A. notify law enforcement.
  • B. start containment.
  • C. make an image copy of the media.
  • D. isolate affected servers.

Questão 41

Questão
Which of the following BEST assists the information security manager in identifying new threats to information security?
Responda
  • A. Performing more frequent reviews of the organization's risk factors
  • B. Developing more realistic information security risk scenarios
  • C. Understanding the flow and classification of information used by the organization
  • D. A process to monitor postincident review reports prepared by IT staff

Questão 42

Questão
An employee has found a suspicious file on a server. The employee thinks the file is a virus and contacts the information security manager. What is the FIRST step to take?
Responda
  • A. Contain the file.
  • B. Delete the file.
  • C. Verify whether the file is malicious.
  • D. Report the suspicious file to management.

Questão 43

Questão
What is the MOST important action prior to having a third party perform an attack and penetration test against an organization?
Responda
  • A. Ensure that the third party provides a demonstration on a test system.
  • B. Ensure that goals and objectives are clearly defined.
  • C. Ensure that technical staff has been briefed on what to expect.
  • D. Ensure that special backups of production servers are taken.

Questão 44

Questão
Which of the following metrics would be the MOST useful in measuring how well information security is monitoring violation logs?
Responda
  • A. Penetration attempts investigated
  • B. Violation log reports produced
  • C. Violation log entries
  • D. Frequency of corrective actions taken

Questão 45

Questão
Which of the following is the MOST important prerequisite for establishing information security management within an organization?
Responda
  • A. Senior management commitment
  • B. Information security framework
  • C. Information security organizational structure
  • D. Information security policy

Questão 46

Questão
A newly-hired information security manager examines the 10-year old business continuity plan and notes that the maximum tolerable outage (MTO) is much shorter than the allowable interruption window (AIW). What action should be taken as a result of this information?
Responda
  • A. Reassess the maximum tolerable outage (MTO).
  • B. Conduct a business impact assessment (BIA) and update the plan.
  • C. Increase the service delivery objective (SDO).
  • D. Take no action; maximum tolerable outage (MTO) is not related to AIW.

Questão 47

Questão
Which of the following change management activities would be a clear indicator that normal operational procedures require examination?
Responda
  • A. A high percentage of similar change requests
  • B. A high percentage of change request postponements
  • C. A high percentage of canceled change requests
  • D. A high percentage of emergency change requests

Questão 48

Questão
Which of the following purposes is for developing a security architecture as a way of meeting business objectives?
Responda
  • A. To reduce the cost of system development
  • B. To aid in strategy and policy development
  • C. To effectively manage complexity
  • D. To determine areas that will be a problem

Questão 49

Questão
An organization's information security strategy should be based on:
Responda
  • A. managing risk relative to business objectives.
  • B. managing risk to a zero level and minimizing insurance premiums.
  • C. avoiding occurrence of risks so that insurance is not required.
  • D. transferring most risks to insurers and saving on control costs.

Questão 50

Questão
Information security managers should use risk assessment techniques to:
Responda
  • A. justify selection of risk mitigation strategies.
  • B. maximize the return on investment (ROI).
  • C. provide documentation for auditors and regulators.
  • D. quantify risks that would otherwise be subjective.

Questão 51

Questão
A business impact analysis (BIA) is the BEST tool for determining:
Responda
  • A. total cost of ownership.
  • B. priority of restoration.
  • C. annualized loss expectancy (ALE).
  • D. residual risk.

Questão 52

Questão
Who is in the BEST position to determine the level of information security needed for a specific business application?
Responda
  • A. The system developer
  • B. The information security manager
  • C. The system custodian
  • D. The data owner

Questão 53

Questão
Proximity factors must be considered when:
Responda
  • A. conducting a business impact assessment.
  • B. conducting a table-top business continuity test.
  • C. developing disaster recovery metrics.
  • D. selecting an alternate recovery site.

Questão 54

Questão
The PRIMARY objective of a security steering group is to:
Responda
  • A. ensure information security covers all business functions.
  • B. ensure information security aligns with business goals.
  • C. raise information security awareness across the organization.
  • D. implement all decisions on security management across the organization.

Questão 55

Questão
Which of the following is the MOST important factor when designing information security architecture?
Responda
  • A. Technical platform interfaces
  • B. Scalability of the network
  • C. Development methodologies
  • D. Stakeholder requirements

Questão 56

Questão
Which of the following factors is MOST important for the successful implementation of an organization's information security program?
Responda
  • A. Senior management support
  • B. Budget for security activities
  • C. Regular vulnerability assessments
  • D. Knowledgeable security administrators

Questão 57

Questão
Where should an intranet server generally be placed?
Responda
  • A. On the internal network
  • B. On the firewall server
  • C. On the external router
  • D. On the primary domain controller

Questão 58

Questão
What action should be taken in regards to data classification requirements before engaging outsourced providers?
Responda
  • A. Ensure the data classification requirements are compatible with the provider's own classification.
  • B. Ensure the data classification requirements are communicated to the provider.
  • C. Ensure the data classification requirements exceed those of the outsourcer.
  • D. Ensure the data classification requirements are stated in the contract.

Questão 59

Questão
What does a network vulnerability assessment intend to identify?
Responda
  • A. 0-day vulnerabilities
  • B. Malicious software and spyware
  • C. Security design flaws
  • D. Misconfiguration and missing updates

Questão 60

Questão
What is the MOST important reason for formally documenting security procedures?
Responda
  • A. Ensure processes are repeatable and sustainable.
  • B. Ensure alignment with business objectives.
  • C. Ensure auditability by regulatory agencies.
  • D. Ensure objective criteria for the application of metrics.

Questão 61

Questão
Which of the following authentication methods prevents authentication replay?
Responda
  • A. Password hash implementation
  • B. Challenge/response mechanism
  • C. Wired Equivalent Privacy (WEP) encryption usage
  • D. HTTP Basic Authentication

Questão 62

Questão
What is the PRIMARY objective of a post-event review in incident response?
Responda
  • A. Adjust budget provisioning
  • B. Preserve forensic data
  • C. Improve the response process
  • D. Ensure the incident is fully documented

Questão 63

Questão
Which of the following choices BEST justifies an information security program?
Responda
  • A. The impact on critical IT assets
  • B. A detailed business case
  • C. Steering committee approval
  • D. User acceptance

Questão 64

Questão
The MOST important basis for developing a business case is the:
Responda
  • A. risk that will be addressed.
  • B. financial analysis of benefits.
  • C. alignment with organizational objectives.
  • D. feasibility and value proposition.

Questão 65

Questão
Which of the following is the MOST important item to consider when evaluating products to monitor security across the enterprise?
Responda
  • A. Ease of installation
  • B. Product documentation
  • C. Available support
  • D. System overhead

Questão 66

Questão
Which of the following is the MOST important element to ensure the success of a disaster recovery test at a vendor-provided hot site?
Responda
  • A. Tests are scheduled on weekends
  • B. Network IP addresses are predefined
  • C. Equipment at the hot site is identical
  • D. Business management actively participates

Questão 67

Questão
Which of the following is the MOST appropriate individual to ensure that new exposures have not been introduced into an existing application during the change management process?
Responda
  • A. System analyst
  • B. System user
  • C. Operations manager
  • D. Data security officer

Questão 68

Questão
The MOST timely and effective approach to detecting nontechnical security violations in an organization is:
Responda
  • A. the development of organizationwide communication channels.
  • B. periodic third-party auditing of incident reporting logs.
  • C. an automated policy compliance monitoring system.
  • D. deployment of suggestion boxes throughout the organization.

Questão 69

Questão
Laws and regulations should be addressed by the information security manager:
Responda
  • A. to the extent that they impact the enterprise.
  • B. by implementing international standards.
  • C. by developing policies that address the requirements.
  • D. to ensure that guidelines meet the requirements.

Questão 70

Questão
Which of the following is the MOST likely to change an organization's culture to one that is more security conscious?
Responda
  • A. Adequate security policies and procedures
  • B. Periodic compliance reviews
  • C. Security steering committees
  • D. Security awareness campaigns

Questão 71

Questão
When an organization is using an automated tool to manage and house its business continuity plans, which of the following is the PRIMARY concern?
Responda
  • A. Ensuring accessibility should a disaster occur
  • B. Versioning control as plans are modified
  • C. Broken hyperlinks to resources stored elsewhere
  • D. Tracking changes in personnel and plan assets

Questão 72

Questão
During an audit, an information security manager discovered that sales representatives are sending sensitive customer information through email messages. Which of the following is the BEST course of action to address the issue?
Responda
  • A. Review the finding with the sales manager to evaluate the risk and impact.
  • B. Report the issue to senior management immediately.
  • C. Request that the sales representatives stop emailing sensitive information.
  • D. Provide security awareness training to the sales representatives.

Questão 73

Questão
An organization has verified that its customer information was recently exposed. Which of the following is the FIRST step a security manager should take in this situation?
Responda
  • A. Inform senior management.
  • B. Determine the extent of the compromise.
  • C. Report the incident to the authorities.
  • D. Communicate with the affected customers.

Questão 74

Questão
After a risk assessment, it is determined that the cost to mitigate the risk is much greater than the benefit to be derived. The information security manager should recommend to business management that the risk be:
Responda
  • A. transferred.
  • B. treated.
  • C. accepted.
  • D. terminated.

Questão 75

Questão
Security risk assessments are MOST cost-effective to a software development organization when they are performed:
Responda
  • A. before system development begins.
  • B. at system deployment.
  • C. before developing a business case.
  • D. at each stage of the software development life cycle (SDLC).

Questão 76

Questão
What is the MOST effective way to ensure network users are aware of their responsibilities to comply with an organization's security requirements?
Responda
  • A. Logon banners displayed at every logon
  • B. Periodic security-related email messages
  • C. An intranet web site for information security
  • D. Circulating the information security policy

Questão 77

Questão
An information security manager has implemented procedures for monitoring specific activities on the network. The system administrator has been trained to analyze the network events, take appropriate action and provide reports to the information security manager. What additional monitoring should be implemented to give a more accurate, risk-based view of network activity?
Responda
  • A. The system administrator should be monitored by a separate reviewer.
  • B. All activity on the network should be monitored.
  • C. No additional monitoring is needed in this situation.
  • D. Monitoring should be done only by the information security manager.

Questão 78

Questão
Which of the following will BEST protect an organization from internal security attacks?
Responda
  • A. Static IP addressing
  • B. Internal address translation
  • C. Prospective employee background checks
  • D. Employee awareness certification program

Questão 79

Questão
Which of the following is in the BEST position to provide information on regulatory and legal compliance requirements that have an effect on information security?
Responda
  • A. Corporate legal officer
  • B. Enterprise risk manager
  • C. Compliance officer
  • D. Affected departments

Questão 80

Questão
Which of the following terms and conditions represent a significant deficiency if included in a commercial hot site contract?
Responda
  • A. A hot site facility will be shared in multiple disaster declarations
  • B. All equipment is provided "at time of disaster, not on floor"
  • C. The facility is subject to a "first-come, first-served" policy
  • D. Equipment may be substituted with equivalent models

Questão 81

Questão
Which of the following situations would be the MOST concern to a security manager?
Responda
  • A. Audit logs are not enabled on a production server
  • B. The logon ID for a terminated systems analyst still exists on the system
  • C. The help desk has received numerous results of users receiving phishing emails
  • D. A Trojan was found to be installed on a system administrator's laptop

Questão 82

Questão
Which of the following criteria is the MOST essential for operational metrics?
Responda
  • A. Timeliness of the reporting
  • B. Relevance to the recipient
  • C. Accuracy of the measurement
  • D. The cost of obtaining the metrics

Questão 83

Questão
Which of the following should be included in a good privacy statement?
Responda
  • A. A notification of liability on accuracy of information
  • B. A notification that information will be encrypted
  • C. A statement of what the company will do with information it collects
  • D. A description of the information classification process

Questão 84

Questão
Which of the following is a preventive measure?
Responda
  • A. A warning banner
  • B. Audit trails
  • C. An access control
  • D. An alarm system

Questão 85

Questão
Which of the following is MOST essential for a risk management program to be effective?
Responda
  • A. Flexible security budget
  • B. Sound risk baseline
  • C. Detection of new risk
  • D. Accurate risk reporting

Questão 86

Questão
When designing information security standards for an enterprise, the information security manager should require that an extranet server be placed:
Responda
  • A. outside the firewall.
  • B. on the firewall server.
  • C. on a screened subnet.
  • D. on the external router.

Questão 87

Questão
Assuming that the value of information assets is known, which of the following gives the information security manager the MOST objective basis for determining that the information security program is delivering value?
Responda
  • A. Number of controls
  • B. Cost of achieving control objectives
  • C. Effectiveness of controls
  • D. Test results of controls

Questão 88

Questão
Which of the following is PRIMARILY related to the emergence of governance, risk and compliance (GRC)?
Responda
  • A. The increasing need for controls
  • B. The policy development process
  • C. The integration of assurance-related activities
  • D. A model for information security program development

Questão 89

Questão
What is the BEST way to determine if an anomaly-based intrusion detection system (IDS) is properly installed?
Responda
  • A. Simulate an attack and review IDS performance.
  • B. Use a honeypot to check for unusual activity.
  • C. Audit the configuration of the IDS.
  • D. Benchmark the IDS against a peer site.

Questão 90

Questão
What responsibility do data owners normally have?
Responda
  • A. Applying emergency changes to application data
  • B. Administering security over database records
  • C. Migrating application code changes to production
  • D. Determining the level of application security required

Questão 91

Questão
Which of the following would be the MOST relevant factor when defining the information classification policy?
Responda
  • A. Quantity of information
  • B. Available IT infrastructure
  • C. Benchmarking
  • D. Requirements of data owners

Questão 92

Questão
When creating a forensic image of a hard drive, which of the following should be the FIRST step?
Responda
  • A. Identify a recognized forensics software tool to create the image.
  • B. Establish a chain of custody log.
  • C. Connect the hard drive to a write blocker.
  • D. Generate a cryptographic hash of the hard drive contents.

Questão 93

Questão
Which of the following actions is MOST important when a server is infected with a virus?
Responda
  • A. Isolate the infected server(s) from the network.
  • B. Identify all potential damage caused by the infection.
  • C. Ensure that the virus database files are current.
  • D. Establish security weaknesses in the firewall.

Questão 94

Questão
An organization's information security manager is planning the structure of the Information Security Steering Committee. Which of the following groups should the manager invite?
Responda
  • A. External audit and network penetration testers
  • B. Board of directors and the organization's regulators
  • C. External trade union representatives and key security vendors
  • D. Leadership from IT, human resources and the sales department

Questão 95

Questão
Which of the following will the data backup policy contain?
Responda
  • A. Criteria for data backup
  • B. Personnel responsible for backup
  • C. A data backup schedule
  • D. A list of systems to be backed up

Questão 96

Questão
In following up on a security incident, the system administrator is to copy data from one hard disk to another. From a forensic perspective, which of the following tasks must be ensured?
Responda
  • A. Copy to the same disk model as the original.
  • B. Make a dual backup of the original disk.
  • C. Keep the digital hash from both hard disks.
  • D. Perform a restoration test after replication.

Questão 97

Questão
What is the BEST way to ensure users comply with organizational security requirements for password complexity?
Responda
  • A. Include password construction requirements in the security standards
  • B. Require each user to acknowledge the password requirements
  • C. Implement strict penalties for user noncompliance
  • D. Enable system-enforced password configuration

Questão 98

Questão
Which of the following is the MOST important step when an employee is transferred to a different function?
Responda
  • A. Reviewing and modifying access rights
  • B. Assigning new security responsibilities
  • C. Conducting specific training for the new role
  • D. Knowledge of security weaknesses in last department

Questão 99

Questão
What is the BEST approach to implement adequate segregation of duties in business critical applications, where shared access to elevated privileges by a small group is necessary?
Responda
  • A. Ensure access to individual functions can be granted to individual users only.
  • B. Implement role-based access control in the application.
  • C. Enforce manual procedures ensuring separation of conflicting duties.
  • D. Create service accounts that can only be used by authorized team members.

Questão 100

Questão
Which of the following would BEST prepare an information security manager for regulatory reviews?
Responda
  • A. Assign an information security administrator as regulatory liaison.
  • B. Perform self-assessments using regulatory guidelines and reports.
  • C. Assess previous regulatory reports with process owners input.
  • D. Ensure all regulatory inquiries are sanctioned by the legal department.

Questão 101

Questão
When electronically stored information is requested during a fraud investigation, which of the following should be the FIRST priority?
Responda
  • A. Assigning responsibility for acquiring the data
  • B. Locating the data and preserving the integrity of the data
  • C. Creating a forensically sound image
  • D. Issuing a litigation hold to all affected parties

Questão 102

Questão
Which of the following should a successful information security management program use to determine the amount of resources devoted to mitigating exposures?
Responda
  • A. Risk analysis results
  • B. Audit report findings
  • C. Penetration test results
  • D. Amount of IT budget available

Questão 103

Questão
Which of the following is the MOST usable deliverable of an information security risk analysis?
Responda
  • A. Business impact analysis (BIA) report
  • B. List of action items to mitigate risk
  • C. Assignment of risks to process owners
  • D. Quantification of organizational risk

Questão 104

Questão
Which of the following is the GREATEST success factor for effectively managing information security?
Responda
  • A. An adequate budget
  • B. Senior level authority
  • C. A robust technology
  • D. Effective business relationships

Questão 105

Questão
Simple Network Management Protocol v2 (SNMP v2) is used frequently to monitor networks. Which of the following vulnerabilities does it always introduce?
Responda
  • A. Remote buffer overflow
  • B. Cross site scripting
  • C. Clear text authentication
  • D. Man-in-the-middle attack

Questão 106

Questão
Which of the following BEST accomplishes secure customer use of an e-commerce application?
Responda
  • A. Data encryption
  • B. Digital signatures
  • C. Strong passwords
  • D. Two-factor authentication

Questão 107

Questão
The MOST effective approach to address issues that arise between IT management, business units and security management when implementing a new security strategy is for the information security manager to:
Responda
  • A. escalate issues to an external third party for resolution.
  • B. ensure that senior management provide authority for security to address the issues.
  • C. insist that managers or units not in agreement with the security solution accept the risk.
  • D. refer the issues to senior management along with any security recommendations.

Questão 108

Questão
Which of the following provides the BEST confirmation that the business continuity/disaster recovery plan objectives have been achieved?
Responda
  • A. The recovery time objective (RTO) was not exceeded during testing
  • B. Objective testing of the business continuity/disaster recovery plan has been carried out consistently
  • C. The recovery point objective (RPO) was proved inadequate by disaster recovery plan testing
  • D. Information assets have been valued and assigned to owners per the business continuity plan/disaster recovery plan

Questão 109

Questão
Why should an incident management team conduct a postincident review?
Responda
  • A. To identify relevant electronic evidence
  • B. To identify lessons learned
  • C. To identify the hacker's identity
  • D. To identify affected areas

Questão 110

Questão
The BEST approach to secure approval for information security expenditures is to:
Responda
  • A. conduct a cost-benefit analysis.
  • B. develop a business case.
  • C. calculate return on investment (ROI).
  • D. evaluate loss history.

Questão 111

Questão
Which of the following attacks is BEST mitigated by utilizing strong passwords?
Responda
  • A. Man-in-the-middle attack
  • B. Brute force attack
  • C. Remote buffer overflow
  • D. Root kit

Questão 112

Questão
The requirement for due diligence is MOST closely associated with which of the following?
Responda
  • A. The right to audit
  • B. Service level agreements (SLAs)
  • C. Appropriate standard of care
  • D. Periodic security reviews

Questão 113

Questão
Which of the following is the MOST important element of an information security strategy?
Responda
  • A. Defined objectives
  • B. Time frames for delivery
  • C. Adoption of a control framework
  • D. Complete policies

Questão 114

Questão
Which of the following is the MOST important action to take when engaging third-party consultants to conduct an attack and penetration test?
Responda
  • A. Request a list of the software to be used
  • B. Provide clear directions to IT staff
  • C. Monitor intrusion detection system (IDS) and firewall logs closely
  • D. Establish clear rules of engagement

Questão 115

Questão
Who in an organization has the responsibility for classifying information?
Responda
  • A. Data custodian
  • B. Database administrator
  • C. Information security officer
  • D. Data owner

Questão 116

Questão
The information security manager should treat regulatory compliance requirements as:
Responda
  • A. an organizational mandate.
  • B. a risk management priority.
  • C. a purely operational issue.
  • D. just another risk.

Questão 117

Questão
After obtaining commitment from senior management, which of the following should be completed NEXT when establishing an information security program?
Responda
  • A. Define security metrics
  • B. Conduct a risk assessment
  • C. Perform a gap analysis
  • D. Procure security tools

Questão 118

Questão
When considering outsourcing services, at what point should information security become involved in the vendor management process?
Responda
  • A. During contract negotiation
  • B. Upon request for assistance from the business unit
  • C. When requirements are being established
  • D. When a security incident occurs

Questão 119

Questão
Which of the following is an example of a corrective control?
Responda
  • A. Diverting incoming traffic as a response to a denial of service (DoS) attack
  • B. Filtering network traffic
  • C. Examining inbound network traffic for viruses
  • D. Logging inbound network traffic

Questão 120

Questão
Which of the following actions should be taken when an information security manager discovers that a hacker is footprinting the network perimeter?
Responda
  • A. Reboot the border router connected to the firewall
  • B. Check IDS logs and monitor for any active attacks
  • C. Update IDS software to the latest available version
  • D. Enable server trace logging on the DMZ segment

Questão 121

Questão
Which of the following steps should be performed FIRST in the risk assessment process?
Responda
  • A. Staff interviews
  • B. Threat identification
  • C. Asset identification and valuation
  • D. Determination of the likelihood of identified risks

Questão 122

Questão
Which of the following is the BEST basis for determining the criticality and sensitivity of information assets?
Responda
  • A. A threat assessment
  • B. A vulnerability assessment
  • C. A resource dependency assessment
  • D. An impact assessment

Questão 123

Questão
In which of the following system development life cycle (SDLC) phases are access control and encryption algorithms chosen?
Responda
  • A. Procedural design
  • B. Architectural design
  • C. System design specifications
  • D. Software development

Questão 124

Questão
An IS manager has decided to implement a security system to monitor access to the Internet and prevent access to numerous sites. Immediately upon installation, employees flood the IT helpdesk with complaints of being unable to perform business functions on Internet sites. This is an example of:
Responda
  • A. conflicting security controls with organizational needs.
  • B. strong protection of information resources.
  • C. implementing appropriate controls to reduce risk.
  • D. proving information security's protective abilities.

Questão 125

Questão
Which of the following is the BEST indicator that security awareness training has been effective?
Responda
  • A. Employees sign to acknowledge the security policy
  • B. More incidents are being reported
  • C. A majority of employees have completed training
  • D. No incidents have been reported in three months

Questão 126

Questão
Which of the following BEST supports the principle of security proportionality?
Responda
  • A. Release management
  • B. Ownership schema
  • C. Resource dependency analysis
  • D. Asset classification

Questão 127

Questão
Which of the following types of information would the information security manager expect to have the LOWEST level of security protection in a publicly traded, multinational enterprise?
Responda
  • A. Strategic business plan
  • B. Upcoming financial results
  • C. Customer personal information
  • D. Previous financial results

Questão 128

Questão
Alignment of an information security program to business objectives is BEST achieved through:
Responda
  • A. senior management directing the information security program.
  • B. periodic risk analysis and treatment.
  • C. a security steering committee with representatives from all business functions.
  • D. regular security audits and ongoing monitoring.

Questão 129

Questão
What activity should the information security manager perform FIRST after finding that compliance with a set of standards is weak?
Responda
  • A. Initiate the exception process.
  • B. Modify policy to address the risk.
  • C. Increase compliance enforcement.
  • D. Perform a risk assessment.

Questão 130

Questão
What activity needs to be performed for previously accepted risk?
Responda
  • A. Risk should be reassessed periodically because risk changes over time.
  • B. Accepted risk should be flagged to avoid future reassessment efforts.
  • C. Risk should be avoided next time to optimize the risk profile.
  • D. Risk should be removed from the risk log after it is accepted.

Questão 131

Questão
Inherent control strength is PRIMARILY a function of which of the following?
Responda
  • A. Implementation
  • B. Design
  • C. Testing
  • D. Policy

Questão 132

Questão
Which of the following is MOST effective in preventing weaknesses from being introduced into existing production systems?
Responda
  • A. Patch management
  • B. Change management
  • C. Security baselines
  • D. Virus detection

Questão 133

Questão
Which of the following actions should the information security manager take FIRST on finding that current controls are not sufficient to prevent a serious compromise?
Responda
  • A. Strengthen existing controls.
  • B. Reassess the risk.
  • C. Set new control objectives.
  • D. Modify security baselines.

Questão 134

Questão
To reduce the possibility of service interruptions, an entity enters into contracts with multiple Internet service providers (ISPs). Which of the following would be the MOST important item to include?
Responda
  • A. Service level agreements (SLAs)
  • B. Right-to-audit clause
  • C. Intrusion detection system (IDS) services
  • D. Spam filtering services

Questão 135

Questão
Which of the following would be the GREATEST challenge when developing a standard awareness training program for a global organization?
Responda
  • A. Technical input requirements for IT security staff
  • B. Evaluating training program effectiveness
  • C. A diverse culture and varied technical abilities of end users
  • D. Availability of users either on weekends or after office hours

Questão 136

Questão
Which of the following is the MOST appropriate method of ensuring password strength in a large organization?
Responda
  • A. Attempt to reset several passwords to weaker values
  • B. Install code to capture passwords for periodic audit
  • C. Sample a subset of users and request their passwords for review
  • D. Install strong password settings on each platform

Questão 137

Questão
Which of the following is the BEST approach to dealing with inadequate funding of the security program?
Responda
  • A. Eliminate low-priority security services.
  • B. Require management to accept the increased risk.
  • C. Prioritize risk mitigation and educate management.
  • D. Reduce monitoring and compliance enforcement activities.

Questão 138

Questão
Which of the following is the MOST critical success factor of an information security program?
Responda
  • A. Developing information security policies and procedures
  • B. Senior management commitment
  • C. Conducting security training and awareness for all users
  • D. Establishing an information security management system

Questão 139

Questão
Phishing is BEST mitigated by which of the following?
Responda
  • A. Security monitoring software
  • B. Encryption
  • C. Two-factor authentication
  • D. User awareness

Questão 140

Questão
Which of the following is the BEST way to ensure that a corporate network is adequately secured against external attack?
Responda
  • A. Utilize an intrusion detection system.
  • B. Establish minimum security baselines.
  • C. Implement vendor recommended settings.
  • D. Perform periodic penetration testing.

Questão 141

Questão
Which of the following should be included in an annual information security budget that is submitted for management approval?
Responda
  • A. A cost-benefit analysis of budgeted resources
  • B. All of the resources that are recommended by the business
  • C. Total cost of ownership (TCO)
  • D. Baseline comparisons

Questão 142

Questão
The MOST important outcome of aligning information security governance with corporate governance is to:
Responda
  • A. show that information security understands the rules.
  • B. provide regulatory compliance.
  • C. maximize the cost-effectiveness of controls.
  • D. minimize the number of rules and regulations required.

Questão 143

Questão
Which of the following defines minimum standards for securing the technical infrastructure?
Responda
  • A. Information security strategy
  • B. Information security guidelines
  • C. Information security model
  • D. Information security architecture

Questão 144

Questão
Which of the following would be MOST relevant to include in a cost-benefit analysis of a two-factor authentication system?
Responda
  • A. Annual loss expectancy (ALE) of incidents
  • B. Frequency of incidents
  • C. Total cost of ownership (TCO)
  • D. Approved budget for the project

Questão 145

Questão
In what circumstances should mandatory access controls (MAC) be used?
Responda
  • A. When the organization has a high risk tolerance
  • B. When delegation of rights is contrary to policy
  • C. When the control policy specifies continuous oversight
  • D. When access is permitted, unless explicitly denied

Questão 146

Questão
Which one of the following network protocols is secure?
Responda
  • A. Simple Mail Transfer Protocol (SMTP)
  • B. File Transfer Protocol (FTP)
  • C. Post Office Protocol (POP3)
  • D. Simple Network Management Protocol (SNMP v3)

Questão 147

Questão
Which of the following choices should be assessed after the likelihood of a loss event has been determined?
Responda
  • A. The magnitude of impact
  • B. Risk tolerance
  • C. The replacement cost of assets
  • D. The book value of assets

Questão 148

Questão
An outsource service provider must handle sensitive customer information. Which of the following is MOST important for an information security manager to know?
Responda
  • A. Security in storage and transmission of sensitive data
  • B. Provider's level of compliance with industry standards
  • C. Security technologies in place at the facility
  • D. Results of the latest independent security review

Questão 149

Questão
What is the result of segmenting a highly sensitive database?
Responda
  • A. It reduces threat.
  • B. It reduces criticality.
  • C. It reduces sensitivity.
  • D. It reduces exposure.

Questão 150

Questão
When establishing a new incident management team whose members will serve on a part-time basis, which of the following means of training is MOST effective?
Responda
  • A. Formal training
  • B. Mentoring
  • C. On-the-job training
  • D. Induction

Questão 151

Questão
Three employees reported the theft or loss of their laptops while on business trips. The FIRST course of action for the security manager is to:
Responda
  • A. assess the impact of the loss and determine mitigating steps.
  • B. communicate the best practices in protecting laptops to all laptop users.
  • C. instruct the erring employees to pay a penalty for the lost laptops.
  • D. recommend that management report the incident to the police and file for insurance.

Quer criar seus próprios Quizzes gratuitos com a GoConqr? Saiba mais.

Semelhante

CISM 2014 Questions - 1
Eduardo Castella7911
CISM 2014 Questions - 2
Eduardo Castella7911
CISM 2014 Questions - With duplicates.
Eduardo Castella7911
CISM Quiz
Martin Covill
CISM 2014 Questions - 1
Rob van der Heijden
CISM 2014 Questions - 2
Rob van der Heijden
Os processos de gestão de pessoas
brunocmt
Função do 2º grau
GoConqr suporte .
O que você pode fazer com GoConqr
GoConqr suporte .
116. Recursos administrativos
Marcelo Sasso Gonzalez
10 dicas para você lidar melhor com o seu tempo
vivi sousa
Explore a Biblioteca