CISM Exam Dumps | Which of the following would provide the MOST useful input when creating an information security program?

<< Prev Question Next Question >>

Question 387/399

Which of the following would provide the MOST useful input when creating an information security program?

A. Key risk indicators (KRls)

B. Information security budget

C. Business case

D. Information security strategy

Question List (399q): Question 1: Web application firewalls are needed in addition to other in...; Question 2: Which of the following is MOST important when carrying out a...; Question 3: When building a corporate-wide business continuity plan {BCP...; Question 4: Which of the following is MOST likely to increase end user s...; Question 5: Which of the following would BEST mitigate identified vulner...; Question 6: In a large organization requesting outsourced services, whic...; Question 7: An organization has decided to migrate a customer facing on-...; Question 8: An organization has established information security policie...; Question 9: An information security manager is reviewing the organizatio...; Question 10: A risk has been formally accepted and documented. Which of t...; Question 11: A global organization is developing an incident response tea...; Question 12: Which of the following is the PRIMARY purpose of conducting ...; Question 13: An information security manager is implementing a bring your...; Question 14: In a large organization, defining recovery time objectives (...; Question 15: The effectiveness of an information security governance fram...; Question 16: Which of the following is the PRIMARY purpose of data classi...; Question 17: Which of the following is the MOST effective method for cate...; Question 18: An IT department plans to migrate an application to the publ...; Question 19: The PRIMARY benefit of integrating information security acti...; Question 20: Which of the following is the PRIMARY benefit of implementin...; Question 21: An information security manager wants to implement a securit...; Question 22: Which of the following is the MOST effective way for an Info...; Question 23: An organization has experienced a ransomware attack. Which o...; Question 24: Risk identification, analysis, and mitigation activities can...; Question 25: When developing security standards, which of the following w...; Question 26: Which of the following is the BEST indicator to demonstrate ...; Question 27: Which of the following is the BEST way for an information se...; Question 28: Which of the following is the PRIMARY purpose for establishi...; Question 29: Which of the following would be the MOST important informati...; Question 30: When designing security controls, it is MOST important to:...; Question 31: Which of the following should be communicated FIRST to senio...; Question 32: What is the MOST important role of an organization's data cu...; Question 33: In an organization implementing a data classification progra...; Question 34: Which of the following is the MOST effective approach to ens...; Question 35: After adopting an information security framework, an informa...; Question 36: Which of the following is an information security manager's ...; Question 37: Which of the following BEST enables effective closure of non...; Question 38: What should an information security manager do FIRST upon le...; Question 39: What should be an information security manager's PRIMARY obj...; Question 40: An emergency change was made to an IT system as a result of ...; Question 41: Which of the following is MOST effective against system intr...; Question 42: Which of the following metrics provides the BEST indication ...; Question 43: An information security program should be established PRIMAR...; Question 44: The BEST way to minimize errors in the response to an incide...; Question 45: Which of the following is BEST to include in a business case...; Question 46: In information security governance, the PRIMARY role of the ...; Question 47: Senior management has allocated funding to each of the organ...; Question 48: An attacker was able to gain access to an organizations peri...; Question 49: An online trading company discovers that a network attack ha...; Question 50: Which of the following should be of MOST influence to an inf...; Question 51: An information security manager finds that corporate informa...; Question 52: A security team is conducting its annual disaster recovery t...; Question 53: The PRIMARY purpose of a security information and event mana...; Question 54: Which of the following is an information security manager's ...; Question 55: Which of the following would provide senior management with ...; Question 56: Which of the following service offerings in a typical Infras...; Question 57: The PRIMARY disadvantage of using a cold-site recovery facil...; Question 58: Which is MOST important to enable a timely response to a sec...; Question 59: Which of the following should be of GREATEST concern to a ne...; Question 60: What is the BEST way for a customer to authenticate an e-com...; Question 61: Information classification is a fundamental step in determin...; Question 62: Which of the following is the BEST indicator that an organiz...; Question 63: A large organization is considering a policy that would allo...; Question 64: An organization is concerned with the risk of information le...; Question 65: Which of the following is the MOST relevant source of inform...; Question 66: Which of the following will identify a deviation in the info...; Question 67: An internal control audit has revealed a control deficiency ...; Question 68: Which of the following BEST indicates senior management supp...; Question 69: Which of the following is the MOST effective approach of del...; Question 70: Which of the following should be the PRIMARY input when defi...; Question 71: A new program has been implemented to standardize security c...; Question 72: The GREATEST benefit of using a maturity model when providin...; Question 73: Senior management commitment and support will MOST likely be...; Question 74: Which of the following would BEST enable effective decision-...; Question 75: Which of the following would BEST enable management to be aw...; Question 76: An organization establishes an internal document collaborati...; Question 77: Which of the following would be the GREATEST threat posed by...; Question 78: The MOST likely cause of a security information event monito...; Question 79: Labeling information according to its security classificatio...; Question 80: An organization us& a particular encryption protocol for...; Question 81: Which of the following is the BEST way to identify the poten...; Question 82: Which of the following is MOST helpful in determining the pr...; Question 83: An information security manager determines there are a signi...; Question 84: Which of the following is MOST helpful in protecting against...; Question 85: Which of the following is the GREATEST benefit of a centrali...; Question 86: Which of the following is the GREATEST benefit of integratin...; Question 87: Which of the following is the PRIMARY reason to invoke conti...; Question 88: Which of the following BEST enables an effective escalation ...; Question 89: Which of the following will BEST enable the identification o...; Question 90: Penetration testing is MOST appropriate when a:...; Question 91: When training an incident response team, the advantage of us...; Question 92: Which of the following is the BEST way for an Information se...; Question 93: After a server has been attacked, which of the following is ...; Question 94: Which of the following would provide the BEST input to a bus...; Question 95: Which of the following is MOST important when selecting a th...; Question 96: Which of the following is MOST critical for an effective inf...; Question 97: Which of the following is the responsibility of a data owner...; Question 98: Which of the following BEST supports the alignment of inform...; Question 99: Which of the following is MOST important to consider when de...; Question 100: Which of the following roles should be separated?...; Question 101: System logs and audit logs for sensitive systems should be s...; Question 102: An organization was forced to pay a ransom to regain access ...; Question 103: What should be an organization'.MAIN concern when evaluating...; Question 104: Which of the following is the MOST important consideration w...; Question 105: Which of the following is the PRIMARY objective of reporting...; Question 106: Which of the following is the MOST important reason to devel...; Question 107: Which of the following is MOST helpful in integrating inform...; Question 108: Which of the following should be the PRIMARY consideration w...; Question 109: An organization s senior management wants to allow employees...; Question 110: Which of the following provides the BEST input to maintain a...; Question 111: Which of the following is the MOST important reason for perf...; Question 112: Which of the following will BEST enable an effective informa...; Question 113: Which of the following approaches is BEST for selecting cont...; Question 114: After a risk has been mitigated, which of the following is t...; Question 115: Which of the following is an information security manager's ...; Question 116: Which of the following provides the GREATEST assurance that ...; Question 117: To address the issue that performance pressures on IT may co...; Question 118: Which of the following threats is prevented by using token-b...; Question 119: A business unit uses e-commerce with a strong password polic...; Question 120: Which of the following presents the GREATEST information sec...; Question 121: Which of the following measures BEST indicates an improvemen...; Question 122: Which of the following is MOST important to consider when de...; Question 123: Which of the following is the BEST method to ensure that dat...; Question 124: An organization has concerns regarding a potential advanced ...; Question 125: An organization is the victim of an attack generating multip...; Question 126: Which of the following messages would be MOST effective in o...; Question 127: A business previously accepted the risk associated with a ze...; Question 128: When supporting a large corporation's board of directors in ...; Question 129: What should be the information security manager s MOST impor...; Question 130: Authorization can BEST be accomplished by establishing:...; Question 131: BEST way to isolate corporate data stored on employee-owned ...; Question 132: It is MOST important tot an information security manager to ...; Question 133: Which of the following is the BEST way for an information se...; Question 134: Which of the following is the MOST significant security risk...; Question 135: Which of the following would provide the BEST justification ...; Question 136: Which of the following is the BEST reason to separate short-...; Question 137: Which of the following is the MOST effective way to identify...; Question 138: Which of the following is MOST likely to drive an update to ...; Question 139: Which of the following is MOST helpful to developing a compr...; Question 140: When reporting on the effectiveness of the information secur...; Question 141: An information security manager determines the organizations...; Question 142: To ensure IT equipment meets organizational security standar...; Question 143: Which of the following will provide the MOST accurate test r...; Question 144: Which of the following is the PRIMARY reason for performing ...; Question 145: Which of the following BEST demonstrates effective informati...; Question 146: Which of the following is an example of a change to the exte...; Question 147: When reporting to senior management on an information securi...; Question 148: Which of the following is the MOST important reason for an o...; Question 149: Which of the following should be the FIRST course of action ...; Question 150: The BEST way to determine the current state of information s...; Question 151: Which of the following is the MOST important criterion for c...; Question 152: Which of the following should provide the PRIMARY basis for ...; Question 153: Which of the following activities should take place FIRST wh...; Question 154: A newly appointed Information security manager finds mere is...; Question 155: What should be information security manager's FIRST course o...; Question 156: Which of the following BEST supports effective information s...; Question 157: Which of the following would BEST demonstrate the maturity l...; Question 158: Which of the following BEST demonstrates the effectiveness o...; Question 159: Which of the following should an information security manage...; Question 160: Noncompliance issues were identified through audit. Which of...; Question 161: Which of the following would BEST ensure that application se...; Question 162: Which of the following BEST measures the effectiveness of an...; Question 163: Which of the following should an information security manage...; Question 164: What should be an information security manager's BEST course...; Question 165: Which of the following is MOST important for an information ...; Question 166: Application data integrity risk would be MOST directly addre...; Question 167: Which of the following is the BEST way to determine if an in...; Question 168: What is the PRIMARY purpose of communicating business impact...; Question 169: In an organization that has undergone an expansion through a...; Question 170: When preparing a strategy for protection from SQL injection ...; Question 171: Which of the following is the MOST effective way for an info...; Question 172: Which of the following helps to ensure that the appropriate ...; Question 173: Which of the following is the GREATEST benefit of informatio...; Question 174: An information security manager suspects that the organizati...; Question 175: Which of the following is MOST important when selecting an i...; Question 176: Which of the following is the PRIMARY purpose of establishin...; Question 177: Following a highly sensitive data breach at a large company,...; Question 178: Which of the following would BEST ensure thai security risk ...; Question 179: Which of the following is MOST helpful for protecting an ent...; Question 180: An organization is considering whether to allow employees to...; Question 181: Which of the following metrics would be considered an accura...; Question 182: Which of the following is the BEST method to defend against ...; Question 183: Which of the following would be MOST effective in preventing...; Question 184: Which of the following is the MOST important reason to consi...; Question 185: Which of the following is MOST important to include in contr...; Question 186: An online payment provider's computer security incident resp...; Question 187: Which of the following is the BEST way to measure the effect...; Question 188: Which of the following is the MOST important delivery outcom...; Question 189: Which of the following is MOST important to consider when de...; Question 190: Which of the following is MOST likely to occur following a s...; Question 191: An information security manager has observed multiple except...; Question 192: A business unit has updated its long-term business plan to i...; Question 193: An organization has outsourced many application development ...; Question 194: Which of the following is BEST performed by the security dep...; Question 195: Which of the following is the STRONGEST indication that seni...; Question 196: Which of the following is the MOST effective method of preve...; Question 197: Which of the following is a benefit of using key risk indica...; Question 198: An information security manager is reviewing the business ca...; Question 199: A new mobile application is unable to adhere to the organiza...; Question 200: An organization is MOST at risk from a new worm being introd...; Question 201: Which of the following is the MOST important criterion when ...; Question 202: A business unit manager wants to adopt an emerging technolog...; Question 203: The PRIMARY purpose of a risk assessment is to enable busine...; Question 204: Which of the following is MOST critical when creating an inc...; Question 205: Which of the following external entities would provide the B...; Question 206: Which of the following tools BEST demonstrates the effective...; Question 207: An information security manager has determined that the mean...; Question 208: An information security manager has been made aware that imp...; Question 209: The MOST effective way to continuously monitor an organizati...; Question 210: An information security manager learns users of an applicati...; Question 211: Which of the following is the BEST mechanism to prevent data...; Question 212: The FIRST step in a risk assessment for a business applicati...; Question 213: An internal security audit has reported that authentication ...; Question 214: Which of the following would BEST enhance firewall security?...; Question 215: An executive's personal mobile device used for business purp...; Question 216: Which of the following should be done FIRST when considering...; Question 217: A business unit has requested IT to implement simple authent...; Question 218: Which of the following is the FlRST step to promoting accept...; Question 219: Which of the following should be the information security ma...; Question 220: When responding to an incident, which of the following is re...; Question 221: Which of the following metrics BEST evaluates the completene...; Question 222: Which of the following is the BEST approach when using sensi...; Question 223: Which of the following should the information security manag...; Question 224: Key systems necessary for branch operations reside at corpor...; Question 225: When trying to integrate information security across an orga...; Question 226: A new mobile application is unable to adhere to the organiza...; Question 227: The MOST important reason that security risk assesements sho...; Question 228: Which of the following should be reviewed to obtain a struct...; Question 229: To meet operational business needs. IT staff bypassed the ch...; Question 230: Which of the following is the MOST effective way for an orga...; Question 231: Which of the following is the MOST important factor to consi...; Question 232: An organization that has outsourced its incident management ...; Question 233: Which of the following poses the GREATEST risk to the operat...; Question 234: Which of the following is the GREATEST risk of single sign-o...; 2 commentQuestion 235: Which of the following is the MOST important reason to docum...; Question 236: Which of the following is MOST relevant for an information s...; Question 237: Senior management wants to provide mobile devices to its sal...; Question 238: Which of the following is the MOST important consideration w...; Question 239: To gain a clear understanding of the impact that a new regul...; Question 240: In the development of an information security strategy, reco...; Question 241: Which of the following is the MOST important consideration w...; Question 242: Which of the following will BEST facilitate the understandin...; Question 243: Which of the following is the MOST important consideration o...; Question 244: Which of the following is the BEST indication that a recentl...; Question 245: Failure to include information security requirements within ...; Question 246: Which of the following is the MAIN concern when securing eme...; Question 247: An access rights review revealed that some former employees'...; Question 248: Information security governance is PRIMARILY driven by which...; Question 249: What is a potential issue when emails are encrypted and digi...; Question 250: Exceptions to a security policy should be approved based PRI...; Question 251: Which of the following is the MOST important consideration w...; Question 252: Which of the following provides the MOST relevant evidence o...; Question 253: When creating an incident response plan, the PRIMARY benefit...; Question 254: Which of the following would provide nonrepudiation of elect...; Question 255: The MOST important reason to have a well-documented and test...; Question 256: Which of the following is the GREATEST benefit of informatio...; Question 257: Which of the following should be an information security man...; Question 258: The authorization to transfer the handling of an internal se...; Question 259: When management changes the enterprise business strategy, wh...; Question 260: During a post-incident review, the sequence and correlation ...; Question 261: Which of the following is the MOST effective method to preve...; Question 262: Which of the following is the MOST effective way to detect s...; Question 263: Which of the following is an information security manager's ...; Question 264: Which of the following is the PRIMARY purpose of red team te...; Question 265: The PRIMARY reason for using information security metrics is...; Question 266: Which of the following is the MOST important outcome from vu...; Question 267: Which of the following is the PRIMARY reason an information ...; Question 268: Which of the following enables compliance with a nonrepudiat...; Question 269: After a recent malware Incident an organization's IT steerin...; Question 270: Which of the following is the MOST effective preventive cont...; Question 271: Which of the following is MOST helpful for aligning security...; Question 272: The BEST way 10 establish a security baseline is by document...; Question 273: A recent phishing attack investigation showed that several e...; Question 274: An organization has announced new initiatives to establish a...; Question 275: Which of the following MOST effectively helps an organizatio...; Question 276: Which of the following provides the BEST justification for a...; Question 277: Which of the following should be the FIRST step to ensure sy...; Question 278: Which of the following is the PRIMARY objective of implement...; Question 279: Which of the following approaches would MOST likely ensure t...; Question 280: Which of the following is an indicator of improvement in the...; Question 281: During the due diligence phase of an acquisition, the MOST i...; Question 282: Which of the following processes would BEST help to ensure t...; Question 283: Which of the following would BEST help to ensure an organiza...; Question 284: Which of the following is the MOST important consideration w...; Question 285: Which of the following is the MOST important function of inf...; Question 286: In an organization with a rapidly changing environment, busi...; Question 287: To ensure adequate disaster-preparedness among IT infrastruc...; Question 288: The selection of security controls is PRIMARILY linked to:...; Question 289: An information security manager is asked to provide a short ...; Question 290: Which of the following is the MOST reliable source of inform...; Question 291: The PRIMARY objective for using threat modeling in web appli...; Question 292: Which of the following would provide the MOST helpful inform...; Question 293: Which of the following is the information security manager's...; Question 294: An information security manager is developing evidence prese...; Question 295: Which of the following is the MOST appropriate board-level a...; Question 296: Cold sites for disaster recovery events are MOST helpful in ...; Question 297: An organization is considering moving lo a cloud service pro...; Question 298: Which of the following is the BEST method for management to ...; Question 299: The PRIMARY objective of a risk response strategy should be:...; Question 300: The integration of information security risk management proc...; Question 301: Which of the following should be done FIRST when handling mu...; Question 302: Which of the following is the MOST effective way to ensure s...; Question 303: A multinational organization wants to ensure its privacy pro...; Question 304: When preparing a business case for the implementation of a s...; Question 305: The MOST important outcome of information security governanc...; Question 306: Which of the following BEST promotes stakeholder accountabil...; Question 307: Which of the following should be an information security man...; Question 308: For a user of commercial software downloaded from the Intern...; Question 309: Who should decide the extent to which an organization will c...; Question 310: Which of the following metrics is the MOST appropriate for m...; Question 311: Adding security requirements late in the software developmen...; Question 312: Which of the following would BEST support a business case to...; Question 313: What is the MOST important consideration when establishing m...; Question 314: When is the BEST time to identify the potential regulatory r...; Question 315: Which of the following BEST determines an information asset'...; Question 316: Which of the following is the PRIMARY purpose for defining k...; Question 317: Which of the following is the MAIN objective of classifying ...; Question 318: An information security manager has been informed of a new v...; Question 319: Which of the following provides the GREATEST assurance that ...; Question 320: A recent audit has identified that security controls require...; Question 321: Which of the following would BEST enable an organization to ...; Question 322: Which of the following would BEST enable integration of info...; Question 323: For an organization with a large and complex IT infrastructu...; Question 324: Which of the following incident response team (IRT) models i...; Question 325: The GREATEST benefit of choosing a private cloud over a publ...; Question 326: A significant gap in an organization's breach containment pr...; Question 327: Planning for the implementation of an information security p...; Question 328: Which of the following is the GREATEST risk associated with ...; Question 329: An information security manager is evaluating the key risk i...; Question 330: An audit reveals that some of an organizations software is e...; Question 331: Which of the following is the GREATEST risk to consider when...; Question 332: Which of the following is MOST critical for prioritizing act...; Question 333: A cloud service provider is unable to provide an independent...; Question 334: Information security can BEST be enforced by making security...; Question 335: Business applications should be selected for disaster recove...; Question 336: An information security manager reads a media report of a ne...; Question 337: An information security manager learns of a new internationa...; Question 338: After implementing an information security governance framew...; Question 339: Which of the following is the MOST effective way to mitigate...; Question 340: Which of the following should be the MOST important criteria...; Question 341: Inadvertent disclosure of internal business information on s...; Question 342: What should be the PRIMARY basis for defining the appropriat...; Question 343: Which of the following defines the MOST comprehensive set of...; Question 344: Which of the following is MOST helpful to an information sec...; Question 345: Which of the following is the GREATEST risk associated with ...; Question 346: An organization with a maturing incident response program co...; Question 347: When an operating system is being hardened, it is MOST impor...; Question 348: Which of the following is the BEST course of action for an i...; Question 349: The PRIMARY objective of periodically testing an incident re...; Question 350: A system administrator failed to report a security incident ...; Question 351: In addition to business alignment and security ownership, wh...; Question 352: Which of the following is the MOST effective control to redu...; Question 353: Which of the following BIST validates that security controls...; Question 354: Which of the following should be an information security man...; Question 355: Which of the following should an information security manage...; Question 356: The MOST important reason to maintain metrics for incident r...; Question 357: Which of the following factors is MOST likely to increase th...; Question 358: Which of the following is the MOST effective way to achieve ...; Question 359: The MOST effective control to detect fraud inside an organiz...; Question 360: Which of the following is the MOST important requirement for...; Question 361: Which of the following is the MOST effective approach for in...; Question 362: A validated patch to address a new vulnerability that may af...; Question 363: When implementing a new risk assessment methodology, which o...; Question 364: The BEST way to establish a recovery time objective (RTO) th...; Question 365: Over the last year, an information security manager has perf...; Question 366: An organization's information security manager will find it ...; Question 367: It is suspected that key emails have been viewed by unauthor...; Question 368: Which of the following is MOST important to consider when de...; Question 369: Which is the BEST way for an organization to monitor securit...; Question 370: To prevent computers on the corporate network from being use...; Question 371: When evaluating vendors for sensitive data processing, which...; Question 372: During an annual security review of an organizations servers...; Question 373: Which of the following metrics would provide management with...; Question 374: Which of the following is an organization's BEST approach fo...; Question 375: Which of the following is the BEST way to facilitate the ali...; Question 376: An information security manager has identified the organizat...; Question 377: Which of the following should be the MOST important consider...; Question 378: Which of the following would contribute MOST to employees' u...; Question 379: A new key business application has gone to production. What ...; Question 380: The success of a computer forensic investigation depends on ...; Question 381: Which of the following is the BEST indication that an organi...; Question 382: Which of the following is MOST important for an information ...; Question 383: The MOST important objective of security awareness training ...; Question 384: A policy has been established requiting users to install mob...; Question 385: When developing a protection strategy for outsourcing applic...; Question 386: A new version of an information security regulation is publi...; Question 387: Which of the following would provide the MOST useful input w...; Question 388: An organization rolled out information security awareness tr...; Question 389: Which of the following would BEST help an information securi...; Question 390: Which of the following is an important criterion for develop...; Question 391: A hash algorithm is used to:; Question 392: An information security manager is preparing a presentation ...; Question 393: When developing a new application, which of the following is...; Question 394: When monitoring the security of a web-based application, whi...; Question 395: An organization planning to contract with a cloud service pr...; Question 396: In a large organization, which of the following is the BEST ...; Question 397: Which of the following would be MOST helpful in gaining supp...; Question 398: An information security manager wants to document requiremen...; Question 399: A company has purchased a rival organization and is looking ...

Question 387/399

LEAVE A REPLY

Download PDF File