Legit CISM Exam Download

Certified Information Security Manager Questions and Answers

Question 41

Which of the following is the MOST likely reason for a vulnerability scanner to return incomplete results?

Unauthenticated vulnerability scans are being performed.

Scan results are not ingested into a security information and event management (SIEM) tool.

Host names have not been fully enumerated.

Zero-day vulnerability signatures have not been ingested.

Question 42

The use of a business case to obtain funding for an information security investment is MOST effective when the business case:

relates the investment to the organization ' s strategic plan.

translates information security policies and standards into business requirements.

articulates management ' s intent and information security directives in clear language.

realigns information security objectives to organizational strategy.

Question 43

Which of the following is MOST important to ensure incident management readiness?

The plan is compliant with industry standards.

The plan is regularly tested.

The plan is updated annually.

The plan is concise and includes a checklist.

Question 44

Which of the following is MOST important when conducting a forensic investigation?

Analyzing system memory

Documenting analysis steps

Capturing full system images

Maintaining a chain of custody