Updated CISM Dumps (V12.02) Are Available for Your Certified Information Security Manager (CISM) Certification Preparation – Check CISM Free Dumps (Part 1, Q1-Q40) Online

1. The MAIN benefit of implementing a data loss prevention (DLP) solution is to:

2. During which of the following phases should an incident response team document actions required to remove the threat that caused the incident?

3. Which of the following is PRIMARILY determined by asset classification?

4. ACISO learns that a third-party service provider did not notify the organization of a data breach that affected the service provider's data center.

Which of the following should the CISO do FIRST?

5. An information security manager developing an incident response plan MUST ensure it includes:

6. Which of the following BEST supports the incident management process for attacks on an organization's supply chain?

7. Which of the following BEST ensures information security governance is aligned with corporate governance?

8. Which of the following should an information security manager do FIRST upon learning that some security hardening settings may negatively impact future business activity?

9. Which of the following is the MOST important reason to ensure information security is aligned with the organization's strategy?

10. Which of the following should be the MOST important consideration when establishing information security policies for an organization?

11. Which of the following is the PRIMARY benefit of implementing a vulnerability assessment process?

A. Threat management is enhanced.

B. Compliance status is improved.

C. Security metrics are enhanced.

D. Proactive risk management is facilitated.

12. Which of the following is the PRIMARY benefit of implementing a vulnerability assessment process?

13. When properly implemented, secure transmission protocols protect transactions:

14. Which of the following is MOST important to have in place as a basis for developing an effective information security program that supports the organization's business goals?

15. Which of the following is the MOST important consideration when establishing an organization's information security governance committee?

16. An information security manager learns that a risk owner has approved exceptions to replace key controls with weaker compensating controls to improve process efficiency.

Which of the following should be the GREATEST concern?

17. Which of the following BEST indicates that information assets are classified accurately?

18. Which of the following is MOST important to include in a post-incident review following a data breach?

19. Which of the following should be the PRIMARY area of focus when mitigating security risks associated with emerging technologies?

20. Which of the following would be the MOST effective way to present quarterly reports to the board on the status of the information security program?

21. Which of the following Is MOST useful to an information security manager when conducting a post-incident review of an attack?

22. Which of the following is the MOST important criterion when deciding whether to accept residual risk?

23. An organization is planning to outsource the execution of its disaster recovery activities.

Which of the following would be MOST important to include in the outsourcing agreement?

24. An organization plans to offer clients a new service that is subject to regulations.

What should the organization do FIRST when developing a security strategy in support of this new service?

25. Which of the following is MOST helpful in determining an organization's current capacity to mitigate risks?

26. An organization is close to going live with the implementation of a cloud-based application. Independent penetration test results have been received that show a high-rated vulnerability.

Which of the following would be the BEST way to proceed?

27. Which of the following messages would be MOST effective in obtaining senior management's commitment to information security management?

28. Who is BEST suited to determine how the information in a database should be classified?

29. In order to understand an organization's security posture, it is MOST important for an organization's senior leadership to:

30. Which of the following provides an information security manager with the MOST accurate indication of the organization's ability to respond to a cyber attack?

31. Which of the following processes BEST supports the evaluation of incident response effectiveness?

32. When deciding to move to a cloud-based model, the FIRST consideration should be:

33. Which of the following is an information security manager's BEST course of action when a threat intelligence report indicates a large number of ransomware attacks targeting the industry?

34. An organization is going through a digital transformation process, which places the IT organization in an unfamiliar risk landscape. The information security manager has been tasked with leading the IT risk management process.

Which of the following should be given the HIGHEST priority?

35. Which of the following BEST ensures timely and reliable access to services?

36. Which of the following is MOST helpful for determining which information security policies should be implemented by an organization?

37. The MOST important reason for having an information security manager serve on the change management committee is to:

38. Which of the following parties should be responsible for determining access levels to an application that processes client information?

39. Which of the following provides the BEST assurance that security policies are applied across business

operations?

40. Which of the following will have the GREATEST influence on the successful adoption of an information security governance program?