Updated CISM Dumps (V13.02) with 966 Questions and Answers: Check the CISM Free Dumps (Part 1, Q1-Q39) Online First

1. Which of the following provides the BEST assurance that security policies are applied across business operations?

2. Which of the following should be the MOST important consideration when establishing information security policies for an organization?

3. A security incident has been reported within an organization.

When should an information security manager contact the information owner? After the:

4. An online bank identifies a successful network attack in progress. The bank should FIRST:

5. An incident management team is alerted ta a suspected security event. Before classifying the suspected event as a security incident, it is MOST important for the security manager to:

6. The BEST way to identify the risk associated with a social engineering attack is to:

7. Which of the following would be MOST useful to a newly hired information security manager who has been tasked with developing and implementing an information security strategy?

8. Which of the following is the BEST way to ensure the organization's security objectives are embedded in business operations?

9. Which of the following is MOST important to have in place as a basis for developing an effective information security program that supports the organization's business goals?

10. When properly implemented, secure transmission protocols protect transactions:

11. Reviewing which of the following would be MOST helpful when a new information security manager is developing an information security strategy for a non-regulated organization?

12. Which of the following is MOST helpful in determining an organization's current capacity to mitigate risks?

13. Information security controls should be designed PRIMARILY based on:

14. Which of the following is the BEST approach to reduce unnecessary duplication of compliance activities?

15. Which of the following is MOST helpful for protecting an enterprise from advanced persistent threats (APTs)?

16. An information security manager is reporting on open items from the risk register to senior management.

Which of the following is MOST important to communicate with regard to these risks?

17. An incident response team has been assembled from a group of experienced individuals, Which type of exercise would be MOST beneficial for the team at the first drill?

18. Which of the following is the BEST method to protect against emerging advanced persistent threat (APT) actors?

19. Which of the following is MOST important to ensure when developing escalation procedures for an incident response plan?

20. An organization has received complaints from users that some of their files have been encrypted. These users are receiving demands for money to decrypt the files.

Which of the following would be the BEST course of action?

21. Which of the following BEST helps to ensure a risk response plan will be developed and executed in a timely manner?

22. Which of the following is the MOST important reason to conduct interviews as part of the business impact analysis (BIA) process?

23. Which of the following is MOST important to ensuring information stored by an organization is protected appropriately?

24. Which of the following BEST indicates that information security governance and corporate governance are integrated?

25. An information security manager learns that a risk owner has approved exceptions to replace key controls with weaker compensating controls to improve process efficiency.

Which of the following should be the GREATEST concern?

26. How does an incident response team BEST leverage the results of a business impact analysis (BIA)?

27. Which of the following Is MOST useful to an information security manager when conducting a post-incident review of an attack?

28. An information security manager finds that a soon-to-be deployed online application will increase risk beyond acceptable levels, and necessary controls have not been included.

Which of the following is the BEST course of action for the information security manager?

29. An organization is increasingly using Software as a Service (SaaS) to replace in-house hosting and support of IT applications.

Which of the following would be the MOST effective way to help ensure procurement decisions consider information security concerns?

30. The effectiveness of an information security governance framework will BEST be enhanced if:

31. Which of the following is MOST important when conducting a forensic investigation?

32. The MOST appropriate time to conduct a disaster recovery test would be after:

33. Which of the following activities is designed to handle a control failure that leads to a breach?

34. Which of the following is MOST important to consider when aligning a security awareness program with the organization's business strategy?

35. An organization finds it necessary to quickly shift to a work-from home model with an increased need for remote access security.

Which of the following should be given immediate focus?

36. Which of the following is the BEST way to help ensure an organization's risk appetite will be considered as part of the risk treatment process?

37. Which of the following is the BEST indication of an effective information security awareness training program?

38. During which of the following phases should an incident response team document actions required to remove the threat that caused the incident?

39. Which of the following is the BEST indicator of an organization's information security status?