Question 1

What would be the MAIN purpose of an immediate post-incident review after a comprehensive test of the incident response plan?

Options :

A : To reduce costs associated with incident response efforts

B : To determine ways to improve incident response plan processes

C : To document weaknesses for the next incident response plan test

D : To revalidate incident response plan activities

Answer: B

Question 2

Which of the following is the MOST important consideration for a global organization that is designing an information security awareness program?

Options :

A : National regulations

B : Program costs

C : Cultural backgrounds

D : Local languages

Answer: A

Question 3

The MOST important objective of security awareness training for business staff is to:

Options :

A : understand intrusion methods.

B : reduce negative audit findings.

C : increase compliance.

D : modify behavior.

Answer: D

Question 4

To inform a risk treatment decision, which of the following should the information security manager compare with the organization's risk appetite?

Options :

A : Gap analysis results

B : Level of risk treatment

C : Configuration parameters

D : Level of residual risk

Answer: D

Question 5

For the information security manager, integrating the various assurance functions of an organization is important PRIMARILY to enable:

Options :

A : consistent security.

B : a security-aware culture.

C : compliance with policy.

D : comprehensive audits.

Answer: D

Smartly Prepare Exam with Free Online CISM Practice Test