[Nov 19, 2024] ActualCollection CISM dumps & Isaca Certification sure practice dumps
ISACA CISM Actual Questions and Braindumps
What Are the Primary Sections Featured in the Isaca CISM Exam?
Adding this certification into your profile verifies that you have a broad set of skills that you can apply for solving different issues in the workplace. And these are covered in the domains of the the CISM exam. Let's go into these one by one.
- Information risk management
CISM ensures that you get the right skills essential for risk management. Mastering the tools and techniques related to this particular process helps you easily distinguish, evaluate, and control possible threats that may affect the business' operations and financial flow. Another thing that makes this area more challenging is the extensive sources of threats, which may include management errors, legal liabilities, and even natural disasters. As a result, it's important to know the entire risk management frameworks, along with related functionalities such as security control selection, risk visibility, reporting, and actions.
- Information security incident management
Now, we're down to the last part of the exam and that is IS incident management. This domain requires candidates to know critical information about incident management as a whole. From there, it underscores one's skills in dealing with incident metrics, indicators, response methodologies, response plans, and management resources. Other areas that need your attention are business continuity, disaster recovery procedures, and post-incident activities. Being able to expound on the present situation of incident response is substantial too.
- Information security governance
Information security governance, in general, is the way you utilize and lead the company's methodology to security. Proper handling of this crucial aspect greatly affects the core security activities of the business. In addition, it allows a smooth-sailing flow of security details within the organization. Aside from aligning the security with the key objectives, it's also significant to have a profound comprehension of the structural processes, security roles, and control frameworks.
- Information security program development and management
For the third section, it's all about program development and administration. At this point, one becomes more competent in the scope of an information security program as well as the entire management framework. Additionally, there will be a comprehensive elaboration of the list of operational and administrative activities, together with typical program challenges, controls, and countermeasures. The general security infrastructure and architecture are also vital topics.
NEW QUESTION # 266
The BEST time to ensure that a corporation acquires secure software products when outsourcing software development is during:
- A. security policy development.
- B. contract negotiation.
- C. contract performance audits.
- D. corporate security reviews.
Answer: B
Explanation:
Section: INFORMATION SECURITY PROGRAM DEVELOPMENT
Explanation/Reference:
NEW QUESTION # 267
Which of the following is MOST important to ensuring information stored by an organization is protected appropriately?
- A. Assigning information asset ownership
- B. Developing a records retention schedule
- C. Defining information stewardship roles
- D. Defining security asset categorization
Answer: A
NEW QUESTION # 268
A new information security manager finds that the organization tends to use short-term solutions to address problems. Resource allocation and spending are not effectively tracked and there is no assurance that compliance requirements are being met What should be done FIRST to reverse this bottom-up approach to security?
- A. Conduct a threat analysis
- B. Create an information security steering committee
- C. Implement an information security awareness training program
- D. Establish an audit committee
Answer: C
NEW QUESTION # 269
What should be an information security manager's NEXT activity following the remediation of a security incident?
- A. Review lessons learned.
- B. Update the incident testing timeline
- C. Update post-incident training.
- D. Review system logs.
Answer: A
NEW QUESTION # 270
An incident response team has established that an application has been breached. Which of the following should be done NEXT?
- A. Maintain the affected systems in a forensically acceptable state
- B. Inform senior management of the breach.
- C. Isolate the impacted systems from the rest of the network
- D. Conduct a risk assessment on the affected application
Answer: C
Explanation:
Explanation
The next thing an incident response team should do after establishing that an application has been breached is to isolate the impacted systems from the rest of the network, which means disconnecting them from the internet or other network connections to prevent further spread of the attack or data exfiltration. Isolating the impacted systems can help to contain the breach and limit its impact on the organization. The other options, such as maintaining the affected systems in a forensically acceptable state, conducting a risk assessment, or informing senior management, may be done later in the incident response process, after isolating the impacted systems. References:
* https://www.crowdstrike.com/cybersecurity-101/incident-response/
* https://learn.microsoft.com/en-us/security/operations/incident-response-playbooks
* https://www.invicti.com/blog/web-security/incident-response-steps-web-application-security/
NEW QUESTION # 271
Senior management has allocated funding to each of the organization's divisions to address information security vulnerabilities. The funding is based on each division's technology budget from the previous fiscal year. Which of the following should be of GREATEST concern to the information security manager?
- A. Return on investment may be inconsistently reported to senior management
- B. Redundant controls may be implemented across divisions
- C. Information security governance could be decentralized by division
- D. Areas of highest risk may not be adequately prioritized for treatment
Answer: D
Explanation:
Section: INFORMATION SECURITY GOVERNANCE
NEW QUESTION # 272
An information security manager has completed a risk assessment and has determined the residual risk.
Which of the following should be the NEXT step?
- A. Conduct an evaluation of controls
- B. Classify all identified risks
- C. Implement countermeasures to mitigate risk
- D. Determine if the risk is within the risk appetite
Answer: D
NEW QUESTION # 273
Which of the following is MOST critical for prioritizing actions in a business continuity plan (BCP)?
- A. Business process mapping
- B. Business impact analysis (6IA)
- C. Asset classification
- D. Risk assessment
Answer: B
NEW QUESTION # 274
Management has announced the acquisition of a new company. The information security manager of parent company is concerned that conflicting access rights may cause critical information to be exposed during the integration of the two companies.
To BEST address this concern, the information security manager should:
- A. review access rights as the acquisition integration occurs.
- B. escalate concern for conflicting access rights to management.
- C. perform a risk assessment of the access rights.
- D. implement consistent access control standards.
Answer: D
Explanation:
Section: INFORMATION SECURITY PROGRAM DEVELOPMENT
NEW QUESTION # 275
Which of the following provides the MOST relevant evidence of incident response maturity?
- A. Red team testing results
- B. Average incident closure time
- C. Independent audit assessment
- D. Tabletop exercise results
Answer: A
NEW QUESTION # 276
Which of the following incident response phases involves actions to help safeguard critical systems while maintaining business operations?
- A. Preparation
- B. Recovery
- C. Identification
- D. Containment
Answer: D
NEW QUESTION # 277
The PRIMARY benefit of integrating information security activities into change management processes is to:
- A. protect the organization from unauthorized changes.
- B. ensure required controls are Included in changes.
- C. protect the business from collusion and compliance threats.
- D. provide greater accountability for security-related changes In the business
Answer: B
NEW QUESTION # 278
Which of the following technologies is utilized to ensure that an individual connecting to a corporate internal network over the Internet is not an intruder masquerading as an authorized user?
- A. Embedded digital signature
- B. Intrusion detection system (IDS)
- C. Two-factor authentication
- D. IP address packet filtering
Answer: C
Explanation:
Explanation/Reference:
Explanation:
Two-factor authentication provides an additional security mechanism over and above that provided by passwords alone. This is frequently used by mobile users needing to establish connectivity to a corporate network. IP address packet filtering would protect against spoofing an internal address but would not provide strong authentication. An intrusion detection system (IDS) can be used to detect an external attack but would not help in authenticating a user attempting to connect. Digital signatures ensure that transmitted information can be attributed to the named sender.
NEW QUESTION # 279
The root cause of a successful cross site request forgery (XSRF) attack against an application is that the vulnerable application:
- A. uses multiple redirects for completing a data commit transaction.
- B. is hosted on a server along with other applications.
- C. has been installed with a non-1egitimate license key.
- D. has implemented cookies as the sole authentication mechanism.
Answer: D
Explanation:
XSRF exploits inadequate authentication mechanisms in web applications that rely only on elements such as cookies when performing a transaction. XSRF is related to an authentication mechanism, not to redirection. Option C is related to intellectual property rights, not to XSRF vulnerability. Merely hosting multiple applications on the same server is not the root cause of this vulnerability.
NEW QUESTION # 280
An organization's security policy is to disable access to USB storage devices on laptops and desklops. Which of the following is the STRONGEST justification for granting an exception to the policy?
- A. Users accept the risk of noncompliance.
- B. USB storage devices are enabled based on user roles.
- C. The benefit is greater than the potential risk
- D. Access is restricted to read-only.
Answer: C
NEW QUESTION # 281
......
Latest CISM Pass Guaranteed Exam Dumps with Accurate & Updated Questions: https://examcollection.actualcollection.com/CISM-exam-questions.html