CISM Exam Dumps | A business unit has requested IT to implement simple authentication using IDs and passwords. The information

<< Prev Question Next Question >>

Question 17/298

A business unit has requested IT to implement simple authentication using IDs and passwords. The information security policy requires using multi-factor authentication. The information security manager should FIRST:

A. perform a risk assessment

B. escalate the request to senior management

C. assess alignment with business objectives.

D. implement two-factor authentication.

Question List (298q): Question 1: An information security manager is implementing controls to ...; Question 2: To gain a clear+ understanding of the impact that a new regu...; Question 3: After a risk has been mitigated, which of the following is t...; Question 4: Which of the following is the BEST way for an information se...; Question 5: Which of the following is MOST important for effective commu...; Question 6: A business unit has updated its long-term business plan to i...; Question 7: When making an outsourcing decision, which of the following ...; Question 8: To ensure adequate disaster-preparedness among IT infrastruc...; Question 9: An organization s HR department would like to outsource its ...; Question 10: After assessing risk, the decision to treat the risk should ...; Question 11: A legacy application does not comply with new regulatory req...; Question 12: When preparing a business case for the implementation of a s...; Question 13: The use of a business case to obtain funding for an informat...; Question 14: What should be an information security manager's PRIMARY obj...; Question 15: Which of the following is the MOST effective way to identify...; Question 16: The BEST way to encourage good security practices is to:...; Question 17: A business unit has requested IT to implement simple authent...; Question 18: What is the MOST important role of an organization's data cu...; Question 19: Which of the following would BEST detect malicious damage ar...; Question 20: As the security program matures, which of the following repo...; Question 21: When developing a new application, which of the following is...; Question 22: Which of the following BEST demonstrates the maturity of an ...; Question 23: A large organization is considering a policy that would allo...; Question 24: The PRIMARY purpose of a security information and event mana...; Question 25: The GREATEST benefit of using a maturity model when providin...; Question 26: What should be an information security manager's FIRST cours...; Question 27: An information security manager is developing evidence prese...; Question 28: Human resources is evaluating potential Software as a Servic...; Question 29: Which of the following is the MOST effective way to detect s...; Question 30: Shortly after installation, an intrusion detection system (I...; Question 31: Which of the following metrics is the BEST indicator of an a...; Question 32: When designing an incident response plan to be agreed upon w...; Question 33: Which of the following is the PRIMARY reason an information ...; Question 34: Which of the following is the PRIMARY reason to conduct peri...; Question 35: Which of the following metrics would be considered an accura...; Question 36: An information security manager is concerned that executive ...; Question 37: An organization's security policy is to disable access to US...; Question 38: Which of the following is the BEST criterion to use when cla...; Question 39: Which of the following would be MOST useful in a report to s...; Question 40: Which of the following is the PRIMARY goal of an incident re...; Question 41: Which of the following processes would BEST aid an informati...; Question 42: Which of the following is the MOST important element of an e...; Question 43: Senior management has just accepted the risk of noncomplianc...; Question 44: When management changes the enterprise business strategy, wh...; Question 45: An information security manager determines there are a signi...; Question 46: Cold sites for disaster recovery events are MOST helpful in ...; Question 47: Implementing a strong password policy is part of an organiza...; Question 48: When implementing a new risk assessment methodology, which o...; Question 49: A PRIMARY advantage of involving business management in eval...; Question 50: Which of the following is MOST important for an information ...; Question 51: A newly hired information security manager for a small organ...; Question 52: From a business perspective the MOST important function of i...; Question 53: After a server has been attacked, which of the following is ...; Question 54: An organization was forced to pay a ransom to regain access ...; Question 55: Which of the following needs to be established between an IT...; Question 56: Which of the following is the MOST important step in risk ra...; Question 57: Which of the following is the BEST way to ensure information...; Question 58: Which of the following activities should take place FIRST wh...; Question 59: The MOST important reason that security risk assesements sho...; Question 60: During the restoration of several servers, a critical proces...; Question 61: Which of the following BEST enables a more efficient inciden...; Question 62: Which of the following metrics is the BEST measure of the ef...; Question 63: Which of the following would BEST fulfill a board of directo...; Question 64: An external security audit has reported multiple instances o...; Question 65: Which of the following is the BEST way to demonstrate to sen...; Question 66: An organization has a policy in which all criminal activity ...; Question 67: Which of the following is MOST important to the successful d...; Question 68: When conducting a post-incident review, the GREATEST benefit...; Question 69: In an organization that has undergone an expansion through a...; Question 70: Which of the following is the MOST significant security risk...; Question 71: Which of the following is the BEST indication that a recentl...; Question 72: Which of the following would provide the MOST helpful inform...; Question 73: Which of the following is MOST important to consider when pr...; Question 74: An employee is found to be using an external cloud storage s...; Question 75: Risk reporting requirements should be PRIMARILY based on:...; Question 76: Which of the following BEST indicates senior management supp...; Question 77: Which of the following is MOST critical for prioritizing act...; Question 78: When an operating system is being hardened, it is MOST impor...; Question 79: Which of the following is the MOST beneficial outcome of tes...; Question 80: The BEST way to ensure information security efforts and init...; Question 81: With limited resources in the information security departmen...; Question 82: An organization establishes an internal document collaborati...; Question 83: Which of the following is the GREATEST risk associated with ...; Question 84: When developing a protection strategy for outsourcing applic...; Question 85: An application system stores customer confidential data and ...; Question 86: An organization is considering a self-service solution for t...; Question 87: When developing security standards, which of the following w...; Question 88: After undertaking a security assessment of a production syst...; Question 89: A message is being sent with a hash. The risk of an attacker...; Question 90: Which of the following is the PRIMARY objective of the incid...; Question 91: The PRIMARY goal of a security infrastructure design is the:...; Question 92: Which of the following is the PRIMARY goal of a risk managem...; Question 93: Which of the following is MOST helpful for protecting an ent...; Question 94: When multiple Internet intrusions on a server are detected, ...; Question 95: Without prior approval, a training department enrolled the c...; Question 96: Which of the following should an information security manage...; Question 97: Which of the following will BEST enable an effective informa...; Question 98: The BEST way to obtain funding from senior management for a ...; Question 99: The PRIMARY objective for using threat modeling in web appli...; Question 100: Within the confidentiality, integrity, and availability (CIA...; Question 101: Which of the following is MOST important to building an effe...; Question 102: An information security manager learns users of an applicati...; Question 103: Which of the following will BEST help to ensure security is ...; Question 104: The PRIMARY goal of a post-incident review should be to...; Question 105: An access rights review revealed that some former employees'...; Question 106: An organization has experienced a ransomware attack. Which o...; Question 107: The GREATEST benefit of choosing a private cloud over a publ...; Question 108: Which of the following is MOST helpful when justifying the f...; Question 109: What should an information security manager do FIRST when a ...; Question 110: When information security management is receiving an increas...; Question 111: A core business unit relies on an effective legacy system th...; Question 112: Which of the following would be an information security mana...; Question 113: Application data integrity risk would be MOST directly addre...; Question 114: Internal audit has reported a number of information security...; Question 115: The selection of security controls is PRIMARILY linked to:...; Question 116: Which of the following external entities would provide the B...; Question 117: In a risk assessment after the identification of threats to ...; Question 118: A global organization is developing an incident response tea...; Question 119: Which of the following would BEST enhance firewall security?...; Question 120: Which of the following is the MOST effective way to mitigate...; Question 121: Organization XYZ. a lucrative, Internet-only business, recen...; Question 122: Which of the following is an example of a change to the exte...; Question 123: When using a newly implemented security information and even...; Question 124: Which of the following contributes MOST to the effective imp...; Question 125: Which of the following processes would BEST help to ensure t...; Question 126: A validated patch to address a new vulnerability that may af...; Question 127: Which of the following should be the MOST important criteria...; Question 128: Which of the following is the BEST way to provide management...; Question 129: Which of the following should an incident response team do N...; Question 130: Following a highly sensitive data breach at a large company,...; Question 131: Which of the following is the MOST important action when usi...; Question 132: Which of the following would provide the MOST useful input w...; Question 133: Which of the following presents the GREATEST concern to the ...; Question 134: Due lo budget constraints, an internal IT application does n...; Question 135: Several significant risks have been identified after a centr...; Question 136: Which of the following BEST describes an intrusion detection...; Question 137: Which of the following is the MOST important requirement for...; Question 138: Relying on which of the following methods when detecting new...; Question 139: Which of the following is BEST determined by using technical...; Question 140: Who should decide the extent to which an organization will c...; Question 141: Which of the following is MOST relevant for an information s...; Question 142: Which of the following is the MOST relevant source of inform...; Question 143: Which of the following is the PRIMARY reason for performing ...; Question 144: Which of the following would be MOST helpful to an informati...; Question 145: Which of the following is the BEST evidence that proper secu...; Question 146: What is the BEST way to manage access to data and applicatio...; Question 147: As part of an international expansion plan, an organization ...; Question 148: Which of the following is MOST likely to result from a prope...; Question 149: An organization is about to purchase a rival organization. T...; Question 150: Which of the following is the MOST important part of an inci...; Question 151: Which of the following sites would be MOST appropriate in th...; Question 152: Which of the following is MOST important to consider when de...; Question 153: The MOST important reason for an information security manage...; Question 154: An information security manager learns of a new internationa...; Question 155: Which of the following would be MOST helpful in gaining supp...; Question 156: Which of the following should an information security manage...; Question 157: Which of the following is the MOST effective method to preve...; Question 158: A team developing an interface to a key financial system has...; Question 159: Which of the following would be MOST effective in preventing...; Question 160: Which of the following BEST reduces the likelihood of leakag...; Question 161: Which of the following would BEST support a business case to...; Question 162: Risk identification, analysis, and mitigation activities can...; Question 163: An information security manager is reviewing the impact of a...; Question 164: Which of the following is the BEST approach when using sensi...; Question 165: Senior management has decided to accept a significant risk w...; Question 166: Which of the following is MOST effective in the strategic al...; Question 167: Which of the following is BEST performed by the security dep...; Question 168: Which of the following is the MOST important consideration o...; Question 169: Which of the following service offerings in a typical Infras...; Question 170: When developing an information security governance framework...; Question 171: Which of the following models provides a client organization...; Question 172: The PRIMARY goal of conducting a business impact analysis (B...; Question 173: An organization has recently experienced unauthorized device...; Question 174: A new privacy regulation is due to take effect in a region w...; Question 175: Which of the following is the BEST course of action for an i...; Question 176: Which of the following is the PRIMARY responsibility of an i...; Question 177: Which of the following is the BEST reason to reassess risk f...; Question 178: An organization wants to ensure its confidential data is iso...; Question 179: Which of the following is the MOST effective method for asse...; Question 180: What information is MOST helpful in demonstrating to senior ...; Question 181: Which of the following is an information security manager's ...; Question 182: A risk was identified during a risk assessment. The business...; Question 183: An organization is concerned with the risk of information le...; Question 184: Which of the following provides the MOST comprehensive under...; Question 185: The frequency of conducting business impact analysis (BIA) s...; Question 186: Following a risk assessment new countermeasures have been ap...; Question 187: When preparing a strategy for protection from SQL injection ...; Question 188: Which of the following would BEST ensure that application se...; Question 189: Which of the following is MOST helpful in integrating inform...; Question 190: Which of the following provides the BEST evidence that a rec...; Question 191: An information security manager is reviewing the organizatio...; Question 192: In addition to cost what is the BEST criteria for selecting ...; Question 193: When supporting a large corporation's board of directors in ...; Question 194: Which of the following is the MOST important driver when dev...; Question 195: Which of the following is the MOST important prerequisite to...; Question 196: Which of the following is the PRIMARY purpose of conducting ...; Question 197: When responding to an incident, which of the following is re...; Question 198: Which of the following metrics BEST evaluates the completene...; Question 199: A cloud service provider is unable to provide an independent...; Question 200: An information security manager has been alerted to a possib...; Question 201: Which of the following would be the BEST way for a company t...; Question 202: Which of the following is the BEST way for an organization t...; Question 203: When the inherent risk of a business activity is lower than ...; Question 204: Which of the following would BEST justify spending for a com...; Question 205: Which of the following sites is MOST appropriate in the case...; Question 206: An organization that has outsourced its incident management ...; Question 207: An information security manager suspects that the organizati...; Question 208: In a resource-restricted security program, which of the foll...; Question 209: Which of the following would provide senior management with ...; Question 210: In addition to business alignment and security ownership, wh...; Question 211: When building a corporate-wide business continuity plan {BCP...; Question 212: The risk of mishandling alerts identified by an intrusion de...; Question 213: Which of the following is the MOST effective way to ensure s...; Question 214: Which of the following is the MOST effective approach to com...; Question 215: Which of the following is the MOST important consideration w...; Question 216: Which of the following would be the MOST important informati...; Question 217: During the due diligence phase of an acquisition, the MOST i...; Question 218: Which of the following would be an information security mana...; Question 219: The MOST important reason to use a centralized mechanism to ...; Question 220: Which of the following is the MOST important outcome of moni...; Question 221: A risk management program will be MOST effective when:...; Question 222: During an annual security review of an organizations servers...; Question 223: Deciding the level of protection a particular asset should b...; Question 224: Following a recent acquisition, an information security mana...; Question 225: In information security governance, the PRIMARY role of the ...; Question 226: Which of the following is the MOST important reason to docum...; Question 227: An organization is the victim of a targeted attack, and is u...; Question 228: Which of the following is MOST important to consider when de...; Question 229: Which of the following is the BEST way to determine if an in...; Question 230: An organization is MOST at risk from a new worm being introd...; Question 231: The BEST way to improve the effectiveness of responding to a...; Question 232: When integrating information security requirements into soft...; Question 233: Which of the following is the MOST effective way to ensure t...; Question 234: Which of the following MOST effectively prevents internal us...; Question 235: What is the PRIMARY role of the information security program...; Question 236: Which of the following tools BEST demonstrates the effective...; Question 237: Which of the following is the MOST effective way to mitigate...; Question 238: Which of the following is the MOST reliable source of inform...; Question 239: Which of the following is the MOST effective way to achieve ...; Question 240: Which of the following is the BEST way for an information se...; Question 241: Which of the following should be the PRIMARY consideration w...; Question 242: Which of the following is MOST helpful to review to gain an ...; Question 243: Which type of test is MOST effective in communicating the ro...; Question 244: An organization has detected potential risk emerging from no...; Question 245: Which of the following should be the FIRST course of action ...; Question 246: Which of the following is the MOST effective approach for in...; Question 247: It is MOST important tot an information security manager to ...; Question 248: Which of the following is MOST important when prioritizing a...; Question 249: An information security manager has observed multiple except...; Question 250: Which of the following metrics would BEST determine the effe...; Question 251: Which of the following should be an information security man...; Question 252: An inexperienced information security manager is relying on ...; Question 253: Which of the following is MOST important when establishing a...; Question 254: Which of the following would BEST assist an information secu...; Question 255: When developing a new system, detailed information security ...; Question 256: The PRIMARY purpose of a periodic threat and risk assessment...; Question 257: Which of the following BEST ensures timely and reliable acce...; Question 258: A recent audit has identified that security controls require...; Question 259: An information security manager reads a media report of a ne...; Question 260: Which of the following is the MOST effective way to detect s...; Question 261: The effectiveness of security awareness programs in fosterin...; Question 262: After an information security business case has been approve...; Question 263: Which of the following is an information security manager's ...; Question 264: Which is MOST important when contracting an external party t...; Question 265: When reporting to senior management on an information securi...; Question 266: Which of the following measures BEST indicates an improvemen...; Question 267: The PRIMARY benefit of integrating information security acti...; Question 268: Which of the following defines the minimum security requirem...; Question 269: Which of the following is the MOST important reason for perf...; Question 270: Establishing which of the following is the BEST way of ensur...; Question 271: Which of the following is the BEST way to ensure the effecti...; Question 272: What should be the PRIMARY basis for establishing a recovery...; Question 273: Which of the following is MOST critical for the successful i...; Question 274: To minimize security exposure introduced by changes to the I...; Question 275: Which of the following would provide the MOST comprehensive ...; Question 276: The BEST way to minimize errors in the response to an incide...; Question 277: To integrate security into system development fie cycle (SDL...; Question 278: What should an information security manager do NEXT when man...; Question 279: Utilizing external resources for highly technical informatio...; Question 280: An organization's recent risk assessment has identified many...; Question 281: Which of the following should be an information security man...; Question 282: Which of the following is the MOST effective way of ensuring...; Question 283: An information security manager has been made aware that som...; Question 284: The integration of information security risk management proc...; Question 285: Which of the following is the- BEST method to determine whet...; Question 286: A CEO requests access to corporate documents from a mobile d...; Question 287: Calculation of the recovery time objective (RTO) is necessar...; Question 288: An information security manager terms that the root password...; Question 289: Which of the following would provide nonrepudiation of elect...; Question 290: Which of the following is MOST critical for an effective inf...; Question 291: An online payment provider's computer security incident resp...; Question 292: An information security manager has been informed of a new v...; Question 293: A third-party contract signed by a business unit manager fai...; Question 294: A company has purchased a rival organization and is looking ...; Question 295: Which of the following is the MOST effective mitigation stra...; Question 296: Which of the following practices BEST supports the achieveme...; Question 297: Which of the following provides the BEST means of ensuring b...; Question 298: Which of the following is a MAIN security challenge when con...

Question 17/298

LEAVE A REPLY

Download PDF File