CISM 무료 덤프문제 온라인 액세스

Which of the following is the PRIMARY role of an information security manager in a software development project?

• A.To enhance awareness for secure software design
• B.To assess and approve the security application architecture
• C.To identify software security weaknesses
• D.To identify noncompliance in the early design stage

A cloud application used by an organization is found to have a serious vulnerability. After assessing the risk, which of the following would be the information security manager ' s BEST course of action?

• A.Initiate the organization ' s incident response process.
• B.Suspend the connection to the application in the firewall
• C.Instruct the vendor to conduct penetration testing.
• D.Report the situation to the business owner of the application.

An application is found to be out of compliance with a regulatory requirement. Of the following, who is MOST appropriate to own the associated risk?

• A.The application owner
• B.The process owner
• C.The compliance manager
• D.The application developer

Which of the following is the BEST indication of an effective disaster recovery planning process?

• A.Recovery time objectives (RTOs) are shorter than recovery point objectives (RPOs).
• B.Post-incident reviews are conducted after each event.
• C.Chain of custody is maintained throughout the disaster recovery process.
• D.Hot sites are required for any declared disaster.

Which of the following is the BEST source of information to support an organization ' s information security vision and strategy?

• A.Metrics dashboard
• B.Governance policies
• C.Capability maturity model
• D.Enterprise information security architecture