Online Access Free CISM Exam Questions

An incident response team recently encountered an unfamiliar type of cyber event. Though the team was able to resolve the issue, it took a significant amount of time to identify. What is the BEST way to help ensure similar incidents are identified more quickly in the future?

• A.Establish performance metrics for the team
• B.Perform a post-incident review
• C.Perform a threat analysis
• D.Implement a SIEM solution

When preventive controls to appropriately mitigate risk are not feasible, which of the following is the MOST important action for the information security manager?

• A.Identifying unacceptable risk levels
• B.Assessing vulnerabilities
• C.Evaluating potential threats
• D.Managing the impact

Which of the following security processes will BEST prevent the exploitation of system vulnerabilities?

• A.Patch management
• B.Intrusion detection
• C.Log monitoring
• D.Antivirus software

Which of the following is MOST important to emphasize when presenting information to gain senior management support for control enhancements?

• A.Threats against internal systems
• B.Recent data breaches in the same industry sector
• C.Control gaps within defense-in-depth architecture
• D.Residual risk exposure

The PRIMARY objective of performing a post-incident review is to:

• A.identify control improvements.
• B.re-evaluate the impact of incidents.
• C.identify vulnerabilities.
• D.identify the root cause.