CISM 무료 덤프문제 온라인 액세스

Which of the following provides the BEST assurance that security policies are applied across business operations?

• A.Organizational standards are enforced by technical controls.
• B.Organizational standards are required to be formally accepted.
• C.Organizational standards are documented in operational procedures.
• D.Organizational standards are included in awareness training.

Which of the following provides the BEST evidence that a recently established infofmation security program is effective?

• A.The number of reported incidents has increased
• B.Senior management has reported fewer junk emails.
• C.Regular IT balanced scorecards are communicated.
• D.The number of tickets associated with IT incidents have stayed consistent

Which of the following is the PRIMARY objective of a business impact analysis (BIA)?

• A.Determine recovery priorities.
• B.Define the recovery point objective (RPO).
• C.Confirm control effectiveness.
• D.Analyze vulnerabilities.

An incident management team is alerted ta a suspected security event. Before classifying the suspected event as a security incident, it is MOST important for the security manager to:

• A.follow the business continuity plan (BCP).
• B.conduct an incident forensic analysis.
• C.notify the business process owner.
• D.follow the incident response plan.

A software vendor has announced a zero-day vulnerability that exposes an organization ' s critical business systems. The vendor has released an emergency patch. Which of the following should be the information security managers PRIMARY concern?

• A.Availability of resources to implement controls
• B.Documentation of patching procedures
• C.Adequacy of the incident response plan
• D.Ability to test the patch prior to deployment