100% satisfaction guarantee Immediately available after payment Both online and in PDF No strings attached
logo-home
Previously searched by you
Previously searched by you
logo
CISM Domain 4 - Information Security Incident Management Practice Exam Questions and Answers $14.49   Add to cart
Quickly navigate to
Preview
  2.  
  3. CISM
  4.  
  5. CISM

Exam (elaborations)

CISM Domain 4 - Information Security Incident Management Practice Exam Questions and Answers
 10 views  0 purchase
  • Course
  • CISM
  • Institution
  • CISM

CISM Domain 4 - Information Security Incident Management Practice Exam Questions and Answers 1 Which of the following should be determined FIRST when establishing a business continuity program? A. Cost to rebuild information processing facilities B. Incremental daily cost of the unavailabilit...

[Show more]

Preview 4 out of 183  pages

Document information

  • August 16, 2024
  • 183
  • 2024/2025
  • Exam (elaborations)
  • Questions & answers

Subjects

  • cism domain 4 information security incident mana

Written for

  • CISM
  • CISM

Seller

avatar-seller
OliviaWest

Reviews received

Content preview

©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM




CISM Domain 4 - Information Security
Incident Management Practice Exam
Questions and Answers

1 Which of the following should be determined FIRST when establishing a

business continuity program?

A. Cost to rebuild information processing facilities

B. Incremental daily cost of the unavailability of systems

C. Location and cost of offsite recovery facilities


D. Composition and mission of individual recovery teams - Answer✔️✔️-B is the

correct answer.

Justification:

A. The cost to rebuild information processing facilities would not be the first thing

to determine.




1

,©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM


B. Prior to creating a detailed business continuity plan, it is important to determine

the incremental daily cost of losing different systems. This will allow recovery

time objectives to be determined.

C. Location and cost of a recovery facility cannot be addressed until the potential

losses are calculated, which will determine the type of recovery site that is needed-

and this will affect cost.

D. Individual recovery team requirements will occur after the requirements for

business continuity are determined.

2 A company has a network of branch offices with local file/print and mail servers;

each branch individually contracts a hot site. Which of the following would be the

GREATEST weakness in recovery capability?

A. Exclusive use of the hot site is limited to six weeks.

B. The hot site may have to be shared with other customers.

C. The time of declaration determines site access priority.


D. The provider services all major companies in the area. - Answer✔️✔️-D is the

correct answer.

Justification:




2

,©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM


A. Access to a hot site is not indefinite; the recovery plan should address a long-

term outage.

B. Sharing a hot site facility is common practice and sometimes necessary in the

case of a major disaster and not a significant weakness.

C. First come, first served is a standard practice in hosted facilities and does not

constitute a major weakness.

D. In case of a disaster affecting a localized geographical area, the vendor's facility

and capabilities could be insufficient for all of its clients, which will all be

competing for the same resource. Preference will likely be given to the larger

corporations, possibly delaying the recovery of a branch that will likely be smaller

than other clients based locally.

3 Which of the following actions should be taken when an online trading company

discovers a network attack in progress?

A. Shut off all network access points

B. Dump all event logs to removable media

C. Isolate the affected network segment


D. Enable trace logging on all events - Answer✔️✔️-C is the correct answer.


Justification:


3

, ©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM


A. Shutting off all network access points would create a denial of service that

could result in loss

of revenue.

B. Dumping event logs, while useful, would not mitigate the immediate threat

posed by the network attack.

C. Isolating the affected network segment will mitigate the immediate threat while

allowing unaffected portions of the business to continue processing.

D. Enabling trace logging, while useful, would not mitigate the immediate threat

posed by the network attack.

4 Which of the following choices should be assessed after the likelihood of a loss

event has been determined?

A. The magnitude of impact

B. Risk tolerance

C. The replacement cost of assets


D. The book value of assets - Answer✔️✔️-A is the correct answer.


Justification:




4

The benefits of buying summaries with Stuvia:

Guaranteed quality through customer reviews

Guaranteed quality through customer reviews

Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.

Quick and easy check-out

Quick and easy check-out

You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.

Focus on what matters

Focus on what matters

Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!

Frequently asked questions

What do I get when I buy this document?

You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.

Satisfaction guarantee: how does it work?

Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.

Who am I buying these notes from?

Stuvia is a marketplace, so you are not buying this document from us, but from seller OliviaWest. Stuvia facilitates payment to the seller.

Will I be stuck with a subscription?

No, you only buy these notes for $14.49. You're not tied to anything after your purchase.

Can Stuvia be trusted?

4.6 stars on Google & Trustpilot (+1000 reviews)

79223 documents were sold in the last 30 days

Founded in 2010, the go-to place to buy study notes for 14 years now

Start selling
$14.49
  • (0)
  Add to cart