CISM Certification Exam Questions with AI Explanations

QUESTION: 321

An information security manager has been asked to create a strategy to protect the organization’s information from a variety of threat vectors. Which of the following should be done FIRST?

Perform a threat modeling exercise
Develop a risk profile
Design risk management processes
Select a governance framework

Answer(s): B

Reveal Solution Next Question

QUESTION: 322

Which of the following would BEST ensure that security risk assessment is integrated into the life cycle of major IT projects?

Integrating the risk assessment into the internal audit program
Applying global security standards to the IT projects
Training project managers on risk assessment
Having the information security manager participate on the project setting committees

Answer(s): B

Reveal Solution Next Question

QUESTION: 323

An information security manager has completed a risk assessment and has determined the residual risk. Which of the following should be the NEXT step?

Conduct an evaluation of controls
Determine if the risk is within the risk appetite
Implement countermeasures to mitigate risk
Classify all identified risks

Answer(s): B

Reveal Solution Next Question

QUESTION: 324

Which of the following would be the BEST indicator that an organization is appropriately managing risk?

The number of security incident events reported by staff has increased
Risk assessment results are within tolerance
A penetration test does not identify any high-risk system vulnerabilities
The number of events reported from the intrusion detection system has declined

Answer(s): B

Reveal Solution Next Question

A large organization is considering a policy that would allow employees to bring their own smartphones into the organizational environment. The MOST important concern to the information security manager should be the:

higher costs in supporting end users
impact on network capacity
decrease in end user productivity
lack of a device management solution

Answer(s): D

Reference:

https://www.isaca.org/Journal/archives/2013/Volume-4/Pages/Leveraging-and-Securing-the-Bring-Your-Own-Device-and-Technology-Approach.aspx

Reveal Solution Next Question

ISACA Certified Information Security Manager CISM Dumps in PDF

Free ISACA CISM Real Questions (page: 65)

QUESTION: 321

QUESTION: 322

QUESTION: 323

QUESTION: 324

QUESTION: 325

Reference: