Question 1

An organization is about to purchase a rival organization. The PRIMARY reason for performing information security due diligence prior to making the purchase is to:

Options :

A : determine the security exposures

B : assess the ability to integrate the security department operations

C : ensure compliance with international standards

D : evaluate the security policy and standards

Answer: A

Question 2

Which of the following provides an information security manager with the MOST accurate indication of the organization's ability to respond to a cyber attack?

Options :

A : Walk-through of the incident response plan

B : Black box penetration test

C : Simulated phishing exercise

D : Red team exercise

Answer: D

Question 3

Which of the following BEST protects against phishing attacks?

Options :

A : Security strategy training

B : Email filtering

C : Network encryption

D : Application whitelisting

Answer: A

Question 4

A CISO learns that a third-party service provider did not notify the organization of a data breach that affected the service provider's data center. Which of the following should the CISO do FIRST?

Options :

A : Determine the extent of the impact to the organization.

B : Request an independent review of the provider-s data center.

C : Notify affected customers of the data breach.

D : Recommend canceling the outsourcing contract.

Answer: A

Question 5

Management has announced the acquisition of a new company. The information security manager of the parent company is concerned that conflicting access rights may cause critical information to be exposed during the integration of the two companies. To BEST address this concern, the information security manager should:

Options :

A : escalate concerns for conflicting access rights to management.

B : review access rights as the acquisition integration occurs.

C : implement consistent access control standards.

D : perform a risk assessment of the access rights.

Answer: C

Higher Test Marks with Free Online CISM Exam Practice

Buying Options: