Question 1

Which of the following is the MOST important consideration when reporting on the status of information security activities?

Options :

A : The report is comprehensive

B : The report is updated on a regular basis

C : The report is tailored to stakeholder needs

D : The report structure is consistent with industry standards

Answer: C

Question 2

Which of the following is MOST important to consider when determining asset valuation?

Options :

A : Potential business loss

B : Asset classification level

C : Asset recovery cost

D : Cost of insurance premiums

Answer: A

Question 3

Following a successful attack, an information security manager should be confident the malware has not continued to spread at the completion of which incident response phase?

Options :

A : Recovery

B : Eradication

C :

Identification

D : Containment

Answer: D

Question 4

During which of the following phases should an incident response team document actions required to remove the threat that caused the incident?

Options :

A : Eradication

B : Identification

C : Containment

D : Post-incident review

Answer: A

Question 5

The MOST important objective of security awareness training for business staff is to:

Options :

A : understand intrusion methods.

B : reduce negative audit findings.

C : increase compliance.

D : modify behavior.

Answer: D

Smartly Prepare Exam with Free Online CISM Practice Test

Buying Options: