CISM (CISM) General 5

Question 1

Which of the following BEST describes the purpose of a Recovery Time Objective (RTO)?

Accepted Answer

The target time within which a business process must be restored after disruption

Answer

RTO defines how quickly a business process must be restored to avoid unacceptable consequences, driving recovery design and investment.

Question 2

What distinguishes a Recovery Point Objective (RPO) from a Recovery Time Objective (RTO)?

Accepted Answer

RPO measures acceptable data loss in time; RTO measures recovery speed

Answer

RPO defines the maximum tolerable data loss window (e.g., last 4 hours of transactions), while RTO defines how quickly systems must be back online.

Question 3

An organization wants to ensure its Business Continuity Plan (BCP) remains effective over time. The BEST way to accomplish this is to:

Accepted Answer

Test, review, and update the BCP on a regular schedule

Answer

Regular testing, review, and updates ensure the BCP reflects current systems, personnel, and threats, maintaining its effectiveness as conditions change.

Question 4

Which of the following is an example of a detective information security control?

Accepted Answer

Intrusion detection system (IDS) alerting on suspicious activity

Answer

Detective controls like IDS identify and alert on events that have occurred or are occurring, enabling response without preventing the activity itself.

Question 5

An information security manager wants to verify that security controls are operating as intended. Which activity is MOST appropriate?

Accepted Answer

Conducting a control effectiveness audit or assessment

Answer

Control effectiveness audits verify that implemented controls are functioning correctly and actually reducing risk as designed.

CISM - Certified Information Security Manager Practice Test

CISM - Certified Information Security Manager Practice Test

CISM (CISM) General 5