CISM Exam Dumps | Which of the following should be the FIRST step in developing an information security strategy?

<< Prev Question Next Question >>

Question 49/185

Which of the following should be the FIRST step in developing an information security strategy?

A. Perform a gap analysis based on the current state

B. Create a roadmap to identify security baselines and controls.

C. Identify key stakeholders to champion information security.

D. Determine acceptable levels of information security risk.

Question List (185q): Question 1: Which of the following is PRIMARILY determined by asset clas...; Question 2: Which of the following is the GREATEST benefit of conducting...; Question 3: Which of the following would provide the MOST effective secu...; Question 4: Which of the following should be done FIRST when establishin...; Question 5: A common drawback of email software packages that provide na...; Question 6: Which of the following is MOST effective in preventing the i...; Question 7: An information security manager has identified that privileg...; Question 8: An intrusion has been detected and contained. Which of the f...; Question 9: The PRIMARY reason to create and externally store the disk h...; Question 10: In a call center, the BEST reason to conduct a social engine...; Question 11: The PRIMARY advantage of involving end users in continuity p...; Question 12: An information security manager is reporting on open items f...; Question 13: Which of the following should be considered FIRST when recov...; Question 14: An organization has purchased an Internet sales company to e...; Question 15: Which of the following defines the triggers within a busines...; Question 16: Which of the following BEST supports effective communication...; Question 17: An organization is implementing an information security gove...; Question 18: An organization is increasingly using Software as a Service ...; Question 19: Which of the following would be MOST effective in gaining se...; Question 20: Senior management has just accepted the risk of noncomplianc...; Question 21: Which of the following would provide the BEST evidence to se...; Question 22: Which of the following would MOST effectively ensure that a ...; Question 23: Which of the following is the BEST way to reduce the risk as...; Question 24: Which of the following is the MOST critical factor for infor...; Question 25: The PRIMARY purpose for continuous monitoring of security co...; Question 26: Management has announced the acquisition of a new company. T...; Question 27: Which of the following is the BEST indication of effective i...; Question 28: Which of the following BEST enables an organization to maint...; Question 29: Which of the following BEST facilitates effective incident r...; Question 30: An organization is leveraging tablets to replace desktop com...; Question 31: In which cloud model does the cloud service buyer assume the...; Question 32: A penetration test was conducted by an accredited third part...; Question 33: An information security manager believes that information ha...; Question 34: Which of the following is the MOST important issue in a pene...; 1 commentQuestion 35: Which of the following risk scenarios is MOST likely to emer...; Question 36: An organization has introduced a new bring your own device (...; Question 37: Which of the following security processes will BEST prevent ...; Question 38: Which of the following is MOST helpful for determining which...; Question 39: Which of the following is an example of risk mitigation?...; Question 40: Which of the following is the BEST justification for making ...; Question 41: Which of the following is the MOST important requirement for...; Question 42: Which of the following is the MOST important factor of a suc...; Question 43: An information security manager has been notified about a co...; Question 44: Which of the following is the FIRST step to establishing an ...; Question 45: Which of the following is BEST to include in a business case...; Question 46: An incident management team is alerted to a suspected securi...; Question 47: An organization has identified an increased threat of extern...; Question 48: Which of the following should be the MOST important consider...; Question 49: Which of the following should be the FIRST step in developin...; Question 50: Of the following, who is in the BEST position to evaluate bu...; Question 51: The information security manager has been notified of a new ...; Question 52: Which of the following would be MOST useful to help senior m...; Question 53: Of the following, whose input is of GREATEST importance in t...; Question 54: An organization's security policy is to disable access to US...; Question 55: An organization has decided to outsource IT operations. Whic...; Question 56: A balanced scorecard MOST effectively enables information se...; Question 57: When creating an incident response plan, the PRIMARY benefit...; Question 58: An anomaly-based intrusion detection system (IDS) operates b...; Question 59: An investigation of a recent security incident determined th...; 1 commentQuestion 60: Which of the following is MOST helpful for protecting an ent...; Question 61: Which of the following would BEST enable a new information s...; Question 62: An employee clicked on a link in a phishing email, triggerin...; Question 63: What is the BEST way to reduce the impact of a successful ra...; Question 64: An information security manager is working to incorporate me...; Question 65: Which of the following is MOST important in order to obtain ...; Question 66: Which of the following will result in the MOST accurate cont...; Question 67: An information security manager is assisting in the developm...; Question 68: Which of the following is the responsibility of a risk owner...; Question 69: Which of the following is MOST important to include in an in...; Question 70: Which of the following is the MOST important consideration w...; Question 71: Which of the following BEST ensures information security gov...; Question 72: The MOST appropriate time to conduct a disaster recovery tes...; Question 73: An information security manager has identified that security...; Question 74: The fundamental purpose of establishing security metrics is ...; Question 75: Which of the following is the BEST approach for managing use...; Question 76: An organization has acquired a company in a foreign country ...; Question 77: Which of the following should be the PRIMARY area of focus w...; Question 78: Which of the following BEST indicates that information secur...; Question 79: Which of the following is MOST helpful in determining an org...; Question 80: Which of the following is the MOST important reason to condu...; Question 81: Which of the following is MOST effective for communicating f...; 1 commentQuestion 82: Which of the following is a PRIMARY benefit of managed secur...; Question 83: A daily monitoring report reveals that an IT employee made a...; Question 84: What should be the FIRST step when an Internet of Things (lo...; Question 85: Which of the following would be an information security mana...; Question 86: Which of the following is MOST important to have in place fo...; Question 87: An organization's information security manager is performing...; Question 88: A cloud application used by an organization is found to have...; Question 89: Information security controls should be designed PRIMARILY b...; Question 90: Which of the following is the MOST effective way to demonstr...; Question 91: Which of the following is an information security manager's ...; Question 92: An organization is close to going live with the implementati...; Question 93: Which of the following BEST enables the integration of infor...; Question 94: Which of the following MUST be defined in order for an infor...; Question 95: Management decisions concerning information security investm...; Question 96: What type of control is being implemented when a security in...; Question 97: A forensic examination of a PC is required, but the PC has b...; Question 98: Threat and vulnerability assessments are important PRIMARILY...; Question 99: Which of the following would BEST justify continued investme...; Question 100: Which of the following should be done FIRST when implementin...; Question 101: Which of the following is a viable containment strategy for ...; Question 102: An information security manager learns through a threat inte...; Question 103: Which of the following is the BEST indication of an effectiv...; Question 104: Which of the following metrics BEST measures the effectivene...; Question 105: Which of the following provides the BEST evidence that a rec...; Question 106: After a server has been attacked, which of the following is ...; Question 107: Which of the following has the GREATEST influence on the suc...; Question 108: An information security manager learns that IT personnel are...; Question 109: Which of the following is the sole responsibility of the cli...; Question 110: When collecting admissible evidence, which of the following ...; Question 111: Which of the following is the BEST option to lower the cost ...; Question 112: To support effective risk decision making, which of the foll...; Question 113: A financial company executive is concerned about recently in...; Question 114: Which of the following presents the GREATEST challenge to th...; Question 115: Which of the following is the BEST way to help ensure an org...; Question 116: Data entry functions for a web-based application have been o...; Question 117: Which of the following is the BEST indication that an organi...; Question 118: Which of the following BEST indicates that an organization h...; Question 119: Which of the following is the PRIMARY objective of incident ...; Question 120: The effectiveness of an information security governance fram...; Question 121: What should be an information security manager's MOST import...; Question 122: Which of the following activities is designed to handle a co...; Question 123: Penetration testing is MOST appropriate when a:...; Question 124: When properly implemented, secure transmission protocols pro...; 1 commentQuestion 125: Which of the following is the PRIMARY role of an information...; Question 126: Which of the following is MOST helpful for aligning security...; Question 127: During which of the following phases should an incident resp...; Question 128: Which of the following activities MUST be performed by an in...; Question 129: Which of the following provides the MOST comprehensive insig...; Question 130: Which of the following is MOST important when defining how a...; Question 131: Which of the following is MOST useful to an information secu...; Question 132: Which of the following tasks should be performed once a disa...; 1 commentQuestion 133: Which of the following MUST happen immediately following the...; Question 134: Which of the following is MOST important for the effective i...; 1 commentQuestion 135: Which of the following would BEST help to ensure appropriate...; Question 136: Which of the following is the PRIMARY benefit of an informat...; Question 137: Which of the following MUST be established to maintain an ef...; Question 138: The BEST way to ensure that frequently encountered incidents...; Question 139: An organization plans to offer clients a new service that is...; Question 140: Which of the following would be MOST useful to a newly hired...; Question 141: Which of the following would be MOST helpful to identify wor...; Question 142: Which of the following should be the FIRST step to gain appr...; 1 commentQuestion 143: An organization is aligning its incident response capability...; Question 144: Which of the following is the MOST important detail to captu...; Question 145: The PRIMARY advantage of performing black-box control tests ...; Question 146: Which of the following metrics is MOST appropriate for evalu...; Question 147: Which of the following should an information security manage...; Question 148: Following a risk assessment, an organization has made the de...; Question 149: What is the PRIMARY objective of performing a vulnerability ...; Question 150: Which of the following should be triggered FIRST when unknow...; Question 151: Which of the following BEST indicates that information asset...; Question 152: An email digital signature will:...; Question 153: Which of the following has the MOST influence on the inheren...; Question 154: Which risk is introduced when using only sanitized data for ...; Question 155: Which of the following is the BEST method for determining wh...; Question 156: Which of the following BEST enables the integration of infor...; Question 157: When implementing a security policy for an organization hand...; 1 commentQuestion 158: An organization has received complaints from users that some...; Question 159: Which of the following BEST enables an organization to provi...; Question 160: Which of the following would be the MOST effective way to pr...; Question 161: Which of the following plans should be invoked by an organiz...; Question 162: Implementing the principle of least privilege PRIMARILY requ...; 1 commentQuestion 163: Which of the following is the PRIMARY reason to monitor key ...; Question 164: Which of the following is the BEST method to protect against...; Question 165: An information security manager determines there are a signi...; Question 166: Which of the following is the BEST defense-in-depth implemen...; Question 167: Labeling information according to its security classificatio...; Question 168: An employee of an organization has reported losing a smartph...; Question 169: While responding to a high-profile security incident, an inf...; Question 170: An organization permits the storage and use of its critical ...; Question 171: Which of the following is the BEST way for an organization t...; Question 172: Which of the following sources is MOST useful when planning ...; Question 173: An organization is creating a risk mitigation plan that cons...; 1 commentQuestion 174: To ensure that a new application complies with information s...; Question 175: Senior management has expressed concern that the organizatio...; Question 176: When performing a business impact analysis (BIA), who should...; Question 177: In a business proposal, a potential vendor promotes being ce...; Question 178: Which of the following factors has the GREATEST influence on...; Question 179: Which of the following methods is the BEST way to demonstrat...; Question 180: Regular vulnerability scanning on an organization's internal...; Question 181: Which of the following BEST supports information security ma...; Question 182: A user reports a stolen personal mobile device that stores s...; 1 commentQuestion 183: Which of the following is the MOST important criterion when ...; Question 184: Which of the following is MOST important to have in place to...; Question 185: For the information security manager, integrating the variou...

Question 49/185

LEAVE A REPLY

Download PDF File