CISM (CISM) ISACA 3

Question 1

A security incident causes a 6-hour outage for a system with an RTO of 4 hours. This PRIMARILY indicates a failure in:

Accepted Answer

Business continuity / disaster recovery planning

Answer

Failing to recover within the established RTO indicates that business continuity and disaster recovery plans were insufficient or ineffectively executed.

Question 2

When conducting a third-party vendor risk assessment, which document provides the MOST assurance regarding a vendor's security controls?

Accepted Answer

A SOC 2 Type II report from an independent auditor

Answer

A SOC 2 Type II report provides independent, audited evidence that controls were operating effectively over a period of time, not just at a point in time.

Question 3

The PRIMARY reason an information security manager should align the security strategy with the business strategy is to:

Accepted Answer

Enable the organization to achieve its business objectives securely

Answer

Security strategy must support business goals so that security enables rather than impedes the achievement of organizational objectives.

Question 4

Which of the following is the MOST effective control to protect against insider threats?

Accepted Answer

Enforcing separation of duties and least privilege access

Answer

Separation of duties and least privilege limit what any single insider can access or do, directly reducing the impact of malicious or negligent insider actions.

Question 5

An organization wants to transfer risk associated with a specific cyber threat. The MOST appropriate risk treatment option is:

Accepted Answer

Purchasing cyber liability insurance

Answer

Cyber liability insurance transfers the financial impact of a cyber incident to a third party, which is the definition of risk transfer.

CISM - Certified Information Security Manager Practice Test

CISM - Certified Information Security Manager Practice Test

CISM (CISM) ISACA 3