Question 1

A KEY consideration in the use of quantitative risk analysis is that it:

Options :

A : aligns with best practice for risk analysis of information assets.

B : assigns numeric values to exposures of information assets.

C : applies commonly used labels to information assets.

D : is based on criticality analysis of information assets.

Answer: B

Question 2

Which of the following is established during the preparation phase of an incident response plan?

Options :

A : Recovery time objectives (RTOs)

B : Chain of custody procedures

C : Stakeholder communication plan

D : Mean time to respond (MTTR)

Answer: C

Question 3

Which or the following is MOST important to consider when determining backup frequency?

Options :

A : Recovery point objective (RPO)

B : Recovery time objective (RTO)

C : Allowable interruption window

D : Maximum tolerable outage (MTO)

Answer: A

Question 4

Which of the following is the BEST indication of an effective information security awareness training program?

Options :

A : An increase in the frequency of phishing tests

B : An increase in positive user feedback

C : An increase in the speed of incident resolution

D : An increase in the identification rate during phishing simulations

Answer: D

Question 5

Which of the following is BEST used to determine the maturity of an information security program?

Options :

A : Security budget allocation

B : Organizational risk appetite

C : Risk assessment results

D : Security metrics

Answer: D

Free CISM Mock Exam – Practice Online Confidently