Practice Test 2 - PACKT CISM

Question 1 of 15

Time Left:
End Quiz

An information security manager has been tasked with the implementation of a security program. What is the first step that they should perform?

Draft the budget requirement for the program.
Define the responsibilities of the program.
Develop a security strategy.
Request management does not perform the process as the technology is new to the organization.

CISM Exam Study Guide

By Hemang Doshi

Buy now

Previous Next Don't Know

What should be the primary concern of the information security manager while implementing a retention policy?

Stringent requirements
Business requirements
Software requirements
Connectivity requirements

CISM Exam Study Guide

By Hemang Doshi

Buy now

Previous Next Don't Know

An information security manager has been notified about a new regulation that impacts the organization’s business. From the following, what should be the first step that the information security manager takes?

Immediately purchase tools provided by a vendor company to automate compliance with new regulations.
Evaluate whether the current controls satisfy the requirements.
Ignore the regulations as the alert was not brought in by the business.
Inform the audit department of the new regulations.

CISM Exam Study Guide

By Hemang Doshi

Buy now

Previous Next Don't Know

A business process was shut down as part of a long-term strategy. What is the best approach to handle information related to this process?

Deleting all information as the process is no longer in operation
Stopping backup of the information
Restricting access to this information
Proceeding as per the retention policy

CISM Exam Study Guide

By Hemang Doshi

Buy now

Previous Next Don't Know

What is the best approach for an information security manager to take while developing a risk management framework for their organization?

A top-down approach
Following industry best practices
A bottom-up approach
Decentralization of management

CISM Exam Study Guide

By Hemang Doshi

Buy now

Previous Next Don't Know

Which of the following would have the primary accountability for information security within an organization?

The steering committee
The system architect
The information security manager
The board of directors

CISM Exam Study Guide

By Hemang Doshi

Buy now

Previous Next Don't Know

The primary responsibility for implementing data classification within an information system lies with:

The information security manager
The steering committee
The system administrator
The system owner

CISM Exam Study Guide

By Hemang Doshi

Buy now

Previous Next Don't Know

An information security manager intends to implement a firewall for an organization’s cloud applications. Which of the following should the information security manager reach out to for sponsorship?

The chief information security officer
The chief operating officer
The human resources officer
The privacy officer

CISM Exam Study Guide

By Hemang Doshi

Buy now

Previous Next Don't Know

Who has the primary responsibility for handling restricted access to data?

The information security manager
The steering committee
The system architect
The system owner

CISM Exam Study Guide

By Hemang Doshi

Buy now

Previous Next Don't Know

An organization decides to use an offshore vendor to manage customer biometric data for a business application. What is the primary concern for the information security manager?

Data privacy
Rules and responsibilities
Size of the organization
Budget for the vendor

CISM Exam Study Guide

By Hemang Doshi

Buy now

Previous Next Don't Know

What is the best approach to gain management support for information security projects?

Reviewing legacy solutions to cut costs
Scaling back innovation activities
Developing a business case
Reducing headcount

CISM Exam Study Guide

By Hemang Doshi

Buy now

Previous Next Don't Know

The business unit head rejects implementing the suggested remediation for a critical security issue. What is the information security manager’s best approach?

Asking the business unit to accept the associated risk
Taking up the discussion about the appropriate recommendation with senior management
Discontinuing security support to the business unit
Dropping the remediation request