Question 1

An organization's outsourced firewall was poorly configured and allowed unauthorized access that resulted in downtime of 48 hours. Which of the following should be the information security manager's NEXT course of action?

Options :

A : Reconfigure the firewall in accordance with best practices.

B : Obtain supporting evidence that the problem has been corrected.

C : Seek damages from the service provider.

D : Revisit the contract and improve accountability of the service provider.

Answer: B

Question 2

Which of the following is the MOST relevant factor when determining the appropriate escalation process in the incident response plan?

Options :

A : Significance of the affected systems

B : Number of resources allocated to respond

C : Resilience capability of the affected systems

D : Replacement cost of the affected systems

Answer: A

Question 3

Which of the following is the BEST indication of effective information security governance?

Options :

A : Information security is considered the responsibility of the entire information security team.

B : Information security is integrated into corporate governance.

C : Information security governance is based on an external security framework.

D : Information security controls are assigned to risk owners.

Answer: B

Question 4

Which of the following is the PRIMARY purpose of implementing information security standards?

Options :

A : To provide a basis for developing information security policies

B : To provide step-by-step instructions for performing security-related tasks

C : To provide management direction with a specific security objective

D : To establish a minimum acceptable security baseline

Answer: D

Question 5

What would be the MAIN purpose of an immediate post-incident review after a comprehensive test of the incident response plan?

Options :

A : To reduce costs associated with incident response efforts

B : To determine ways to improve incident response plan processes

C : To document weaknesses for the next incident response plan test

D : To revalidate incident response plan activities

Answer: B

Higher Test Marks with Free Online CISM Exam Practice

Buying Options: