Question 1

Following a successful attack, an information security manager should be confident the malware has not continued to spread at the completion of which incident response phase?

Options :

A : Recovery

B : Eradication

C :

Identification

D : Containment

Answer: D

Question 2

Senior management is concerned that the incident response team took unapproved actions during incident response that put business objectives at risk. Which of the following is the BEST way for the information security manager to respond to this situation?

Options :

A : Update roles and responsibilities of the incident response team.

B : Train the incident response team on escalation procedures.

C : Implement a monitoring solution for incident response activities.

D : Validate that the information security strategy maps to corporate objectives.

Answer: A

Question 3

An information security manager has been asked to determine whether an information security initiative has reduced risk to an acceptable level. Which of the following activities would provide the BEST information for the information security manager to draw a conclusion?

Options :

A : Initiating a cost-benefit analysis of the implemented controls

B : Performing a risk assessment

C : Reviewing the risk register

D : Conducting a business impact analysis (BIA)

Answer: A

Question 4

Which of the following should be an information security manager's MAIN concern if the same digital signing certificate is able to be used by two or more users?

Options :

A : Potential to decrypt digital hash values

B : Inability to validate identity of sender

C : Certificate alteration

D : Segregation of duties

Answer: B

Question 5

Which of the following has the MOST direct impact on the usability of an organization's asset classification policy?

Options :

A : The granularity of classifications in the hierarchy

B : The support of IT management for the classification scheme

C : The frequency of updates to the organization-s risk register

D : The business objectives of the organization

Answer: D

Higher Test Marks with Free Online CISM Exam Practice

Buying Options: