Online Access Free CISM Exam Questions

A critical server for a hospital has been encrypted by ransomware. The hospital is unable to function effectively without this server Which of the following would MOST effectively allow the hospital to avoid paying the ransom?

• A.A properly tested offline backup system
• B.A properly configured firewall
• C.Employee training on ransomware
• D.A continual server replication process

A business impact analysis (BIA) should be periodically executed PRIMARILY to:

• A.validate vulnerabilities on environmental changes.
• B.verify the effectiveness of controls.
• C.check compliance with regulations.
• D.analyze the importance of assets.

Which of the following should be an information security manager ' s PRIMARY concern when an organization is expanding business to a new country?

• A.Compliance with local regulations
• B.Changes in IT infrastructure
• C.Cultural differences in the new country
• D.Ability to gather customer data

A PRIMARY benefit of adopting an information security framework is that it provides:

• A.credible emerging threat intelligence.
• B.standardized security controls.
• C.common exploitability indices.
• D.security and vulnerability reporting guidelines.

Which of the following is the MOST important factor in successfully implementing Zero Trust?

• A.Preferring networks that have undergone penetration testing
• B.Focusing on logging and monitoring of user behavior
• C.Authenticating and authorizing strategic points of the architecture
• D.Understanding each component of the network