Online Access Free CPIM-8.0 Exam Questions

An organization's computer incident response team PRIMARILY responds to which type of control?

• A.Corrective
• B.Administrative
• C.Detective
• D.Preventative

Which if the following is the FIRST control step in provisioning user rights and privileges?

• A.Authorization
• B.Identification
• C.Confidentiality
• D.Authentication

Price negotiation is most appropriate when purchasing which of the following product categories?

• A.Standard products
• B.Made-to-order (MTO) items
• C.Commodities
• D.Items of small value

If organizational leadership determines that its required continuous monitoring plan is too costly for the organization, what action should be taken by leadership and the Authorizing Official (AO)?

• A.Determine if the organization's risk posture allows the system to operate without the continuous monitoring of the controls in question
• B.Ensure that the organization's Configuration Management (CM) and control processes are documented and executed according to policy
• C.Identify and monitor only the technical controls, as they cover the most critical threats to the organization
• D.Continue developing the system using a secure Software Development Life Cycle (SDLC) approach and testing, thereby eliminating the need for monitoring the security controls

Which of the following is a PRIMARY benefit of sharing assessment results among key organizational officials across information boundaries?

• A.Identifies areas that require additional training emphasis in each organizational element
• B.Allows management to assess which organizational elements have the best security practices
• C.Facilitates development of organization-wide security metrics
• D.Provides the organization a wider view of systemic weaknesses and deficiencies in their information systems