CISM Exam Dumps | An organization is developing a disaster recover/ plan for a data center that hosts multiple applications.

<< Prev Question Next Question >>

Question 51/255

An organization is developing a disaster recover/ plan for a data center that hosts multiple applications. The application recovery sequence would BEST be determined through an analysis of:

A. The data classification scheme.

B. Recovery time objectives (RTOs)

C. Key performance indicators (KPIs)

D. Recovery point objectives (RPOs)

Question List (255q): Question 1: The MOST effective way to communicate the level of impact of...; Question 2: Which of the following would be an information security mana...; Question 3: A recent phishing attack investigation showed that several e...; Question 4: Which of the following will identify a deviation in the info...; Question 5: Which of the following is the BEST way to determine if an in...; Question 6: An organization is the victim of a targeted attack, and is u...; Question 7: A risk profile supports effective security decisions PRIMARI...; Question 8: Which of the following is the BEST way to demonstrate to sen...; Question 9: An organization planning to contract with a cloud service pr...; Question 10: To implement a security framework, an information security m...; Question 11: The BEST way to establish a recovery time objective (RTO) th...; Question 12: A global organization is developing an incident response tea...; Question 13: Which of the following should an incident response team do N...; Question 14: Which of the following is the MOST important factor to consi...; Question 15: An organization will be outsourcing mission-critical process...; Question 16: Within the confidentiality, integrity, and availability (CIA...; Question 17: Which of the following is the MOST important element of a re...; Question 18: Reviewing security objectives and ensuring the integration o...; Question 19: The selection of security controls is PRIMARILY linked to:...; Question 20: A cloud service provider is unable to provide an independent...; Question 21: The effectiveness of security awareness programs in fosterin...; Question 22: Which of the following is the MOST effective method to preve...; Question 23: Which of the following is MOST important to consider when de...; Question 24: Which of the following is a PRIMARY responsibility of an inf...; Question 25: During an emergency security incident, which of the followin...; Question 26: Which of the following is the PRIMARY product of a business ...; Question 27: An audit reveals that some of an organizations software is e...; Question 28: Which of the following is the MOST important outcome of test...; Question 29: Which of the following defines the triggers within a busines...; Question 30: For a user of commercial software downloaded from the Intern...; Question 31: Which of the following is the FIRST step required to achieve...; Question 32: After assessing risk, the decision to treat the risk should ...; Question 33: Which of the following is the BEST way to identify the poten...; Question 34: The PRIMARY role of an information security steering group i...; Question 35: Which of the following is the MOST important outcome of seni...; Question 36: Which of the following is the MOST important consideration w...; Question 37: The BEST way to determine the current state of information s...; Question 38: The PRIMARY benefit of integrating information security risk...; Question 39: Which of the following is a MAIN security challenge when con...; Question 40: When developing a disaster recovery plan, which of the follo...; Question 41: Which of the following is the BEST way to facilitate the ali...; Question 42: To ensure IT equipment meets organizational security standar...; Question 43: Which of the following is the FIRST task when determining an...; Question 44: An information security manager is concerned that executive ...; Question 45: Which of the following is the BEST indication that a recentl...; Question 46: Deciding the level of protection a particular asset should b...; Question 47: After an information security business case has been approve...; Question 48: Which of the following is the MOST effective defense against...; Question 49: Which of the following is the BEST method to ensure that dat...; Question 50: Which of the following is MOST likely to reduce the effectiv...; Question 51: An organization is developing a disaster recover/ plan for a...; Question 52: Which of the following metrics is MOST useful to demonstrate...; Question 53: Which of the following would contribute MOST to employees' u...; Question 54: When trying to integrate information security across an orga...; Question 55: The PRIMARY objective of periodically testing an incident re...; Question 56: The head of a department affected by a recent security incid...; Question 57: An information security manager is evaluating the key risk i...; Question 58: A multinational organization wants to ensure its privacy pro...; Question 59: Which of the following is the MOST important outcome of moni...; Question 60: Several significant risks have been identified after a centr...; Question 61: An information security manager is planning to purchase a mo...; Question 62: What should the information security manager do FIRST when e...; Question 63: An information security program should be established PRIMAR...; Question 64: Which of the following is the BEST way for an information se...; Question 65: Which of the following provides the BEST evidence that the i...; Question 66: Which of the following is the BEST approach to identify nonc...; Question 67: An organization's operations have been significantly impacte...; Question 68: Which of the following is the BEST method to protect against...; Question 69: Which of the following is the BEST way to demonstrate to sen...; Question 70: A system administrator failed to report a security incident ...; Question 71: Which of the following would be MOST important to consider w...; Question 72: Which of the following would be MOST effective when justifyi...; Question 73: Which of the following BEST measures the effectiveness of an...; Question 74: To ensure appropriate control of information processed in IT...; Question 75: Before final acceptance of residual risk, what is the BEST w...; Question 76: An information security manager has researched several optio...; Question 77: An organization wants to integrate information security into...; Question 78: Which of the following would BEST help to ensure an organiza...; Question 79: Which of the following would provide the MOST helpful inform...; Question 80: Which of the following provides the BEST indication that the...; 1 commentQuestion 81: Which of the following is the BEST indication of an effectiv...; Question 82: The PRIMARY focus of a training curriculum for members of an...; Question 83: When developing a classification method for incidents, the c...; Question 84: Which of the following practices BEST supports the achieveme...; Question 85: Information classification is a fundamental step in determin...; Question 86: An organization is considering the purchase of a competitor....; Question 87: An organization is in the process of adopting a hybrid data ...; Question 88: When developing an incident response plan, the information s...; Question 89: The PRIMARY reason an organization would require that users ...; Question 90: Which of the following is the BEST reason for delaying the a...; Question 91: An information security manager has identified numerous viol...; Question 92: Which of the following would BEST help to ensure compliance ...; Question 93: An organization has recently experienced unauthorized device...; Question 94: Which of the following is the MOST effective way to identify...; Question 95: Which of the following will BEST ensure that risk is evaluat...; Question 96: As the security program matures, which of the following repo...; Question 97: Several significant risks have been identified after a centr...; Question 98: An organization's security was compromised by outside attack...; Question 99: Which of the following BIST validates that security controls...; Question 100: A risk was identified during a risk assessment. The business...; Question 101: When establishing the trigger levels for an organization's k...; Question 102: Which of the following is the MOST effective way to mitigate...; Question 103: A new version of an information security regulation is publi...; Question 104: The PRIMARY purpose of a security information and event mana...; Question 105: Which of the following should be the MOST important consider...; Question 106: An employee is found to be using an external cloud storage s...; Question 107: Which of the following is the BEST strategy to implement an ...; Question 108: The risk of mishandling alerts identified by an intrusion de...; Question 109: Senior management learns of several web application security...; Question 110: An organization is considering moving one its critical busin...; Question 111: An organization s HR department would like to outsource its ...; Question 112: An information security manager has implemented an ongoing s...; Question 113: The BEST way to minimize errors in the response to an incide...; Question 114: Which of the following is the- BEST method to determine whet...; Question 115: An organization has decided to store production data in a cl...; Question 116: Which of the following is the MOST important consideration w...; Question 117: Which of the following metrics is the BEST indicator of an a...; Question 118: Which of the following is MOST likely to be included in an e...; Question 119: Which of the following is the STRONGEST indication that seni...; Question 120: Which of the following is the responsibility of a data owner...; Question 121: A multinational organization has developed a bring your own ...; Question 122: Which of the following is the PRIMARY benefit of using agent...; Question 123: Which of the following would BEST help to ensure an organiza...; Question 124: Which of the following should be define* I FIRST when creati...; Question 125: An organization's information security strategy for the comi...; Question 126: Which of the following is MOST helpful in protecting against...; Question 127: An information security manager has developed a strategy to ...; Question 128: Which of the following is the PRIMARY goal of an incident re...; Question 129: Which of the following is MOST relevant for an information s...; Question 130: An information security manager is concerned that executive ...; Question 131: When making an outsourcing decision, which of the following ...; Question 132: In a risk assessment after the identification of threats to ...; Question 133: A large organization is considering a policy that would allo...; Question 134: The success of a computer forensic investigation depends on ...; Question 135: An organization is concerned with the risk of information le...; Question 136: Which of the following sites would be MOST appropriate in th...; Question 137: An organization is about to purchase a rival organization. T...; Question 138: Which of the following is MOST helpful to review to gain an ...; Question 139: The MOST effective way to continuously monitor an organizati...; Question 140: Establishing which of the following is the BEST way of ensur...; Question 141: For an organization with a large and complex IT infrastructu...; Question 142: Which of the following is the MOST important reason for perf...; Question 143: Web application firewalls are needed in addition to other in...; Question 144: After undertaking a security assessment of a production syst...; Question 145: The PRIMARY benefit of integrating information security acti...; Question 146: What is the PRIMARY purpose of communicating business impact...; Question 147: Which of the following is MOST important for an information ...; Question 148: A review of a number of recent XT system rollouts identified...; Question 149: Labeling information according to its security classificatio...; Question 150: An information security manager learns that a departmental s...; Question 151: The BEST way to ensure information security efforts and init...; Question 152: Which of the following is the BEST resource for evaluating t...; Question 153: A PRIMARY advantage of involving business management in eval...; Question 154: An organization has implemented an enhanced password policy ...; Question 155: The MOST important reason to use a centralized mechanism to ...; Question 156: Which of the following is an example of a vulnerability?...; Question 157: An organization has determined that one of its web servers h...; Question 158: What should the information security manager recommend to su...; Question 159: The MOST important reason for an information security manage...; Question 160: The BEST way to encourage good security practices is to:...; Question 161: To address the issue that performance pressures on IT may co...; Question 162: When preventative controls to appropriately mitigate risk ar...; Question 163: Which of the following is the PRIMARY benefit to an organiza...; Question 164: An organization's marketing department has requested access ...; Question 165: Which of the following BEST helps to identify vulnerabilitie...; Question 166: What is the MOST effective way to ensure information securit...; Question 167: Which of the following is MOST critical for an effective inf...; Question 168: Which of the following is the BEST indication that a recentl...; Question 169: A new mobile application is unable to adhere to the organiza...; Question 170: Which of the following is an information security manager's ...; Question 171: Which of the following should be of MOST influence to an inf...; Question 172: Which of the following should be reviewed to obtain a struct...; Question 173: Which of the following provides the BEST means of ensuring b...; Question 174: An organization has detected potential risk emerging from no...; Question 175: An organization with a strict need-to-know information acces...; Question 176: Which of the following is the GREATEST risk associated with ...; Question 177: The MAIN purpose of documenting information security guideli...; Question 178: Shortly after installation, an intrusion detection system (I...; Question 179: What should be an information security manager's FIRST step ...; Question 180: Which of the following should be the PRIMARY consideration f...; Question 181: An organization establishes an internal document collaborati...; Question 182: Which of the following is the MAIN concern when securing eme...; Question 183: Which of the following is the PRIMARY role of a data custodi...; Question 184: Reviewing which of the following would provide the GREATEST ...; Question 185: After adopting an information security framework, an informa...; Question 186: Which of the following has the GREATEST impact on efforts to...; Question 187: Which of the following enables compliance with a nonrepudiat...; Question 188: To gain a clear understanding of the impact that a new regul...; Question 189: An executive's personal mobile device used for business purp...; Question 190: A security incident has resulted in a failure of the enterpr...; Question 191: Which of the following BEST describes an intrusion detection...; Question 192: What is the BEST way for an information security manager to ...; Question 193: In an organization implementing a data classification progra...; Question 194: In the absence of technical controls, what would be the BEST...; Question 195: Which of the following defines the triggers within a busines...; Question 196: Which of the following is MOST important to the successful i...; Question 197: The PRIMARY goal of a security infrastructure design is the:...; Question 198: Which of the following metrics would be considered an accura...; Question 199: In a large organization, which of the following is the BEST ...; Question 200: Which of the following is MOST important for an information ...; Question 201: When using a newly implemented security information and even...; Question 202: Which of the following would BEST fulfill a board of directo...; Question 203: An information security manager has been made aware that som...; Question 204: Which of the following is MOST important for an information ...; Question 205: Which of the following threats is prevented by using token-b...; Question 206: An outsourced vendor handles an organization's business-crit...; Question 207: Which of the following is MOST important when selecting an i...; Question 208: An information security manager has identified multiple area...; Question 209: A business unit has requested IT to implement simple authent...; Question 210: An organization is considering a self-service solution for t...; Question 211: In a large organization requesting outsourced services, whic...; Question 212: Which of the following methods BEST ensures that a comprehen...; Question 213: After a security incident has been contained, which of the f...; Question 214: Which of the following is the GREATEST risk of single sign-o...; Question 215: Which of the following metrics is the BEST measure of the ef...; Question 216: Which of the following is BEST determined by using technical...; Question 217: Which is MOST important to enable a timely response to a sec...; Question 218: Organization XYZ. a lucrative, Internet-only business, recen...; Question 219: When building a corporate-wide business continuity plan {BCP...; Question 220: Which of the following is the BEST reason to separate short-...; Question 221: A newly hired information security manager discovers that th...; Question 222: Which of the following would be MOST useful in a report to s...; Question 223: Utilizing external resources for highly technical informatio...; Question 224: Threat and vulnerability assessments are important PRIMARILY...; Question 225: What should be an organization'e. MAIN concern when evaluati...; Question 226: Human resources is evaluating potential Software as a Servic...; Question 227: Which of the following is the BEST way for an information se...; Question 228: Which of the following control type is the FIRST considerati...; Question 229: In an organization where IT is critical to its business stra...; Question 230: A payroll application system accepts individual user sign-on...; Question 231: Which of the following is MOST important to include in an in...; Question 232: Which of the following will BEST provide an organization wit...; Question 233: During an annual security review of an organizations servers...; Question 234: Information security governance is PRIMARILY driven by which...; Question 235: A global organization has developed a strategy to share a cu...; Question 236: Which of the following would BEST mitigate identified vulner...; Question 237: A threat intelligence report indicates there has been a sign...; Question 238: The MOST important factors in determining the scope and timi...; Question 239: An organization establishes an internal document collaborati...; Question 240: Which of the following will BEST enable an effective informa...; Question 241: Which of the following is the MOST effective way to detect s...; Question 242: The MOST likely cause of a security information event monito...; Question 243: An organization is considering a self-service solution for t...; Question 244: Relying on which of the following methods when detecting new...; Question 245: When introducing security measures into a software developme...; Question 246: Which of the following is the MOST significant benefit of ef...; Question 247: Which of the following is the BEST way to rigorously test a ...; Question 248: It is MOST important tot an information security manager to ...; Question 249: Which of the following techniques is MOST useful when an inc...; Question 250: Which of the following BEST demonstrates effective informati...; Question 251: To integrate security into system development fie cycle (SDL...; Question 252: Which of the following is the MOST useful input for an infor...; Question 253: Failure to include information security requirements within ...; Question 254: An organization s senior management wants to allow employees...; Question 255: Which of the following is MOST important to building an effe...

Question 51/255

LEAVE A REPLY

Download PDF File