Question 1

While responding to a high-profile security incident, an information security manager observed several deficiencies in the current incident response plan. When would be the BEST time to update the plan?

Options :

A : While responding to the incident

B : During a tabletop exercise

C : During post-incident review

D : After a risk reassessment

Answer: C

Question 2

Which of the following is MOST important to consider when defining control objectives?

Options :

A : Industry best practices

B : An information security framework

C : Control recommendations from a recent audit

D : The organization's risk appetite

Answer: D

Question 3

When establishing an information security governance framework, it is MOST important for an information security manager to understand:

Options :

A : information security best practices.

B : risk management techniques.

C : the threat environment.

D : the corporate culture.

Answer: D

Question 4

Which of the following is the MOST important benefit of using a cloud access security broker when migrating to a cloud environment?

Options :

A : Enhanced data governance

B : Increased third-party assurance

C : )Improved incident management

D : Reduced total cost of ownership (TCO)

Answer: A

Question 5

Who is accountable for ensuring proper controls are in place to address the confidentiality and availability of an information system?

Options :

A : Senior management

B : Information owner

C : Business manager

D : Information security manager

Answer: A

Free CISM Mock Exam – Practice Online Confidently

Buying Options: