100% Free CISM Exam Dumps to Pass Exam Easily from PrepAwayETE [Q41-Q63]

NEW QUESTION 41
When a proposed system change violates an existing security standard, the conflict would be BEST resolved by:

NEW QUESTION 42
When a user employs a client-side digital certificate to authenticate to a web server through Secure Socket Layer (SSI.), confidentiality is MOST vulnerable to which of the following?

NEW QUESTION 43
Who should determine the appropriate classification of accounting ledger data located on a database server and maintained by a database administrator in the IT department?

NEW QUESTION 44
The value of information assets relative to the organization is BEST determined by:

NEW QUESTION 45
The PRIMARY reason for using metrics as part of an information security program is to help management:

NEW QUESTION 46
Identification and prioritization of business risk enables project managers to:

NEW QUESTION 47
An organization to integrate information security into its human resource management processes. Which of the following should be the FIRST step?

NEW QUESTION 48
An organization engages 4 third-party vendor to monitor and support a financial application under scrutiny by regulators. Maintaining strict data integrity and confidentiality for this application is critical to the business. Which of the following controls would MOST effectively manage risk to the organization?

NEW QUESTION 49
A web-based business application is being migrated from test to production. Which of the following is the MOST important management signoff for this migration?

NEW QUESTION 50
In an organization, information systems security is the responsibility of:

NEW QUESTION 51
A company recently developed a breakthrough technology. Since this technology could give this company a significant competitive edge, which of the following would FIRST govern how this information is to be protected?

NEW QUESTION 52
Which of the following is the MOST effective solution for preventing individuals external to the organization from modifying sensitive information on a corporate database?

NEW QUESTION 53
A benefit of using a full disclosure (white box) approach as compared to a blind (black box) approach to penetration testing is that:

NEW QUESTION 54
Senior management has just accepted the risk of noncompliance with a new regulation. What should the information security manager do NEXT?

NEW QUESTION 55
Which of the following would provide the MOST helpful information when developing a prioritized list of IT assets to protect in the event of an incident?

NEW QUESTION 56
Which of the following is MOST effective in protecting against the attack technique known as phishing?

NEW QUESTION 57
Which of the following would represent a violation of the chain of custody when a backup tape has been identified as evidence in a fraud investigation? The tape was:

NEW QUESTION 58
When an organization hires a new information security manager, which of the following goals should this individual pursue FIRST?

NEW QUESTION 59
Which of the following is generally used to ensure that information transmitted over the Internet is authentic and actually transmitted by the named sender?

NEW QUESTION 60
Which of the following should be the FIRST step in developing an information security plan?

NEW QUESTION 61
Which of the following should be the FIRST step to ensure system updates are applied in a timely manner?

NEW QUESTION 62
Internal audit has reported a number of information security issues which are not in compliance with regulatory requirements. What should the information security manager do FIRST?

NEW QUESTION 63
Which resource is the MOST effective in preventing physical access tailgating/piggybacking?