Free CISM Exam braindumps download (CISM exam dumps Free)

QUESTION: 351 Exam Topic: INFORMATION RISK MANAGEMENT

Which of the following BEST illustrates residual risk within an organization?

Risk management framework
Risk register
Business impact analysis
Heat map

Answer(s): A

QUESTION: 352 Exam Topic: INFORMATION RISK MANAGEMENT

Following a recent acquisition, an information security manager has been requested to address the outstanding risk reported early in the acquisition process. Which of the following would be the manager’s BEST course of action?

Add the outstanding risk to the acquiring organization’s risk registry.
Re-assess the outstanding risk of the acquired company.
Re-evaluate the risk treatment plan for the outstanding risk.
Perform a vulnerability assessment of the acquired company’s infrastructure.

Answer(s): B

Show Answer Next Question

QUESTION: 353 Exam Topic: INFORMATION RISK MANAGEMENT

An organization has recently experienced unauthorized device access to its network. To proactively manage the problem and mitigate this risk, the BEST preventive control would be to:

keep an inventory of network and hardware addresses of all systems connected to the network.
install a stateful inspection firewall to prevent unauthorized network traffic.
implement network-level authentication and login to regulate access of devices to the network.
deploy an automated asset inventory discovery tool to identify devices that access the network.

Answer(s): C

Show Answer Next Question

QUESTION: 354 Exam Topic: INFORMATION RISK MANAGEMENT

A core business unit relies on an effective legacy system that does not meet the current security standards and threatens the enterprise network. Which of the following is the BEST course of action to address the situation?