[Q317-Q338] The Best Valid CISM Dumps for Helping Passing CISM Exam!

Rate this post

The Best Valid CISM Dumps for Helping Passing CISM Exam!

UPDATED ISACA CISM Exam Questions & Answer

ISACA CISM Exam Syllabus Topics:

Section	Weight	Objectives
Topic 1: Information Security Program Development and Management	33%	– Align the information security program with the operational objectives of other business functions – Develop and maintain a security awareness, training and education program for all stakeholders – Establish, communicate and maintain organizational information security standards, guidelines, procedures and other documentation – Establish and maintain information security architectures (people, process, technology) – Establish and/or maintain the information security program in alignment with the information security strategy – Integrate information security requirements into organizational processes – Identify, acquire and manage information security requirements for internal and external resources (services, partners, and suppliers) – Monitor and manage the information security program
Topic 2: Information Security Risk Management	20%	– Determine appropriate risk treatment options – Integrate risk management into business and IT processes – Monitor and communicate the information security risk posture – Establish and/or maintain a process for information asset identification, classification, risk assessment and ownership – Evaluate information security controls to determine whether they are appropriate and effectively mitigate risk – Ensure that risk assessments, vulnerability assessments and threat assessments are performed consistently, at appropriate times, and to identify acceptable risk – Identify legal, regulatory, organizational and other applicable compliance requirements – Identify and/or recommend risk treatment options
Topic 3: Information Security Incident Management	30%	– Develop and implement processes to ensure the timely identification of information security incidents – Establish and maintain an organizational definition of, and severity hierarchy for, information security incidents – Establish and maintain communication plans and processes to manage communication with internal and external entities – Establish and maintain processes to investigate and document information security incidents – Establish and maintain incident escalation and notification processes – Test, review and revise the incident response plan – Establish and maintain an incident response plan to ensure an effective and timely response to information security incidents – Organize, train and equip teams to effectively respond to information security incidents
Topic 4: Information Security Governance	17%	– Establish and/or maintain an information security governance framework and supporting processes to ensure that the information security strategy is aligned with the goals and objectives of the organization – Obtain commitment from senior management and other stakeholders for the information security program – Establish and/or maintain information security policies to guide the development of standards, procedures and guidelines in alignment with enterprise goals and objectives – Identify internal and external influences to the organization that affect the information security strategy and program – Establish, monitor, evaluate and report information security management metrics – Define and communicate the roles and responsibilities for information security throughout the organization – Develop business cases to support investments in information security

NO.317 Which of the following BEST indicates the effectiveness of the vendor risk management process?

Increase in the percentage of vendors certified to a globally recognized security standard

Increase in the percentage of vendors that have reported security breaches

Increase in the percentage of vendors conducting mandatory security training

Increase in the percentage of vendors with a completed due diligence review

NO.318 An information security manager recently received funding for a vulnerability scanning tool to replace manual assessment techniques and needs to justify the expense of the tool going forward. Which of the following metrics would BEST indicate the tool is effective?

An increase in the severity of detected vulnerabilities

An increase in the number of detected vulnerabilities

A decrease in the lime needed to detect vulnerabilities

A decrease in staff needed to detect vulnerabilities

NO.319 Which of the following principles BEST addresses the protection of data from unauthorized modification?

Integrity

Availability

Nonrepudiation

Authenticity

NO.320 When establishing metrics for an information security program, the BEST approach is to identify indicators that:

reduce information security program spending.

support major information security initiatives.

reflect the corporate risk culture.

demonstrate the effectiveness of the security program.

NO.321 An organization has received complaints from users that some of their files have been encrypted. These users are receiving demands for money to decrypt the files. Which of the following would be the BEST course of action?

Conduct an impact assessment.

Isolate the affected systems.

Rebuild the affected systems.

Initiate incident response.

The best course of action when the organization receives complaints from users that some of their files have been encrypted and they are receiving demands for money to decrypt the files is to initiate incident response.
This is because the organization is facing a ransomware attack, which is a type of malicious software that encrypts the victim’s data and demands a ransom for the decryption key. Ransomware attacks can cause significant disruption, damage, and loss to the organization’s operations, assets, and reputation. Therefore, the organization needs to quickly activate its incident response plan and team, which are designed to handle such security incidents in a coordinated, effective, and efficient manner. The incident response process involves the following steps1:
Preparation: The incident response team prepares the necessary resources, tools, and procedures to respond to the incident. The team also establishes the roles, responsibilities, and communication channels among the team members and other stakeholders.
Identification: The incident response team identifies the scope, source, and severity of the incident. The team also collects and preserves the relevant evidence and logs for further analysis and investigation.
Containment: The incident response team isolates the affected systems and networks to prevent the spread of the ransomware and limit the impact of the incident. The team also implements temporary or alternative solutions to restore the essential functions and services.
Eradication: The incident response team removes the ransomware and any traces of its infection from the affected systems and networks. The team also verifies that the systems and networks are clean and secure before restoring them to normal operations.
Recovery: The incident response team restores the affected systems and networks to normal operations. The team also decrypts or restores the encrypted data from backups or other sources, if possible. The team also monitors the systems and networks for any signs of recurrence or residual issues.
Lessons learned: The incident response team conducts a post-incident review to evaluate the effectiveness and efficiency of the incident response process and team. The team also identifies the root causes, lessons learned, and best practices from the incident. The team also recommends and implements the necessary improvements and corrective actions to prevent or mitigate similar incidents in the future.
References = CISM Review Manual, 16th Edition, Chapter 4: Information Security Incident Management, Section: Incident Response Process, pages 229-2331; CISM Review Questions, Answers & Explanations Manual, 10th Edition, Question 45, page 432.

NO.322 Which of the following is the MOST effective way to prevent information security incidents?

Implementing a security information and event management (SIEM) tool

Implementing a security awareness training program for employees

Deploying a consistent incident response approach

Deploying intrusion detection tools in the network environment

NO.323 After detecting an advanced persistent threat (APT), which of the following should be the information security manager’s FIRST step?

Conduct a vulnerability analysis.

Remove the threat.

Notify affected stakeholders.

Perform a root cause analysis.

NO.324 Which of the following is CRITICAL to ensure the appropriate stakeholder makes decisions during a cybersecurity incident?

Up-to-date risk register

Stakeholder communication plan

Escalation plan

Asset classification

NO.325 Which of the following sources is MOST useful when planning a business-aligned information security program?

Security risk register

Information security policy

Business impact analysis (BIA)

Enterprise architecture (EA)

NO.326 Which of the following is the BEST method to ensure that data owners take responsibility for implementing information security processes’

Increase security awareness training

Include security tasks into employee job descriptions

Include membership on project teams

Provide job rotation into the security organization.

NO.327 Which of the following is the GREATEST benefit of incorporating information security governance into the corporate governance framework?

Heightened awareness of information security strategies

Improved process resiliency in the event of attacks

Promotion of security-by-design principles to the business

Management accountability for information security

NO.328 Executive leadership has decided to engage a consulting firm to develop and implement a comprehensive security framework for the organization to allow senior management to remain focused on business priorities.
Which of the following poses the GREATEST challenge to the successful implementation of a new security governance framework?

Information security management does not fully accept the responsibility for information security governance.

Executive leadership views information security governance primarily as a concern of the information security management team.

Information security staff has little or no experience with the practice of information security governance.

Executive leadership becomes involved in decisions about information security governance.

NO.329 An organization’s quality process can BEST support security management by providing:

security configuration controls.

assurance that security requirements are met.

guidance for security strategy.

a repository for security systems documentation.

NO.330 Which of the following BEST contributes to the successful management of security incidents?

Current technologies

Tested controls

Established procedures

Established policies

NO.331 When introducing a new information asset, what is the MOST important responsibility of the asset owner?

Information backup

Information access administration

Information disposal

Information classification

NO.332 Which of the following should be an information security manager’s.
MOST important consideration when determining if an information asset has been classified appropriately?

Security policy requirements

Level of protection

Value to the business

Ownership of information

NO.333 To determine how a security breach occurred on the corporate network, a security manager looks at the logs of various devices. Which of the following BEST facilitates the correlation and review of these logs?

Database server

Domain name server (DNS)

Time server

Proxy server

NO.334 After a recovery from a successful malware attack, instances of the malware continue to be discovered. Which phase of incident response was not successful?

Eradication
B Recovery

Lessons learned review

Incident declaration

NO.335 Security technologies should be selected PRIMARILY on the basis of their:

ability to mitigate business risks.

evaluations in trade publications.

use of new and emerging technologies.

benefits in comparison to their costs.

NO.336 An information security manager wishing to establish security baselines would:

include appropriate measurements in the system development life cycle.

implement the security baselines to establish information security best practices.

implement the security baselines to fulfill laws and applicable regulations in different jurisdictions.

leverage information security as a competitive advantage.

NO.337 Which of the following is the BEST metric for evaluating the effectiveness of an intrusion detection mechanism?

Number of attacks detected

Number of successful attacks

Ratio of false positives to false negatives

Ratio of successful to unsuccessful attacks

NO.338 Which of the following should be the FIRST step in developing an information security strategy?

Determine acceptable levels of information security risk

Create a roadmap to identify security baselines and controls

Perform a gap analysis based on the current state

Identify key stakeholders to champion information security

Updated CISM Dumps Questions For ISACA Exam: https://www.pdf4test.com/CISM-dump-torrent.html

Free certification test prep

[Q317-Q338] The Best Valid CISM Dumps for Helping Passing CISM Exam!

ISACA CISM Exam Syllabus Topics:

Leave a Reply Cancel reply