Testorion.com

About
All Quizes
Cart
Checkout
Contact
Home
Login
Member’s Portal
My account
Our Store
Privacy Policy
Profile
Purchased Quiz
Registration
Registration Success
Reset Password
Sample Page
Shop
Support Center
Terms and Conditions

CISM Test 1 [Trial]

Time limit: 0

Quiz Summary

0 of 10 Questions completed

Questions:

Information

You have already completed the quiz before. Hence you can not start it again.

Quiz is loading…

You must sign in or sign up to start the quiz.

You must first complete the following:

Results

Quiz complete. Results are being recorded.

Results

0 of 10 Questions answered correctly

Your time:

Time has elapsed

You have reached 0 of 0 point(s), (0)

Earned Point(s): 0 of 0, (0)
0 Essay(s) Pending (Possible Point(s): 0)

Categories

Not categorized 0%

1
2
3
4
5
6
7
8
9
10

Current
Review / Skip
Answered
Correct
Incorrect

Question 1 of 10

1. Question
Which of the following best describes information security governance?
- A. Information security policies
- B. Information security policies along with audits of those policies
- C. Management’s control of information security processes
- D. Benchmarks of metrics as compared to similar organizations
Correct

Incorrect
Question 2 of 10

2. Question
In a risk management process, who is the best person(s) to make a risk treatment decision?
- A. Chief risk officer (CRO)
- B. Chief information officer (CIO)
- C. Process owner who is associated with the risk
- D. Chief information security officer (CISO)
Correct

Incorrect
Question 3 of 10

3. Question
The ultimate responsibility for an organization’s cybersecurity program lies with whom?
- A. The board of directors
- B. The chief executive officer (CEO)
- C. The chief information officer (CIO)
- D. The chief information security officer (CISO)
Correct

Incorrect
Question 4 of 10

4. Question
In a U.S. public company, a CISO will generally report the state of the organization’s cybersecurity program to:
- A. The Treadway Commission
- B. Independent auditors
- C. The U.S. Securities and Exchange Commission
- D. The audit committee of the board of directors
Correct

Incorrect
Question 5 of 10

5. Question
A new CISO in an organization is building its cybersecurity program from the ground up. To ensure collaboration among business leaders and department heads in the organization, the CISO should form and manage which of the following?
- A. A risk committee of the board of directors
- B. A cybersecurity steering committee
- C. An audit committee of the board of directors
- D. Business-aligned security policy
Correct

Incorrect
Question 6 of 10

6. Question
Who is the best person or group to make cyber-risk treatment decisions?
- A. The chief information security officer (CISO)
- B. The audit committee of the board of directors
- C. The cybersecurity steering committee
- D. The chief risk officer (CRO)
Correct

Incorrect
Question 7 of 10

7. Question
Which is the best party to conduct access reviews?
- A. Users’ managers
- B. Information security manager
- C. IT service desk
- D. Department head
Correct

Incorrect
Question 8 of 10

8. Question
Which is the best party to make decisions about the purpose and function of business applications?
- A. Business department head
- B. IT business analyst
- C. Application developer
- D. End user
Correct

Incorrect
Question 9 of 10

9. Question
Which of the following is the best definition of custodial responsibility?
- A. A custodian protects assets based on the customer’s defined interests.
- B. A custodian protects assets based on the custodian’s own defined interests.
- C. A custodian makes decisions based on the custodian’s own defined interests.
- D. A custodian makes decisions based on the customer’s defined interests.
Correct

Incorrect
Question 10 of 10

10. Question
What is the primary risk of IT acting as custodian for a business owner?
- A. IT may not have enough interest to provide quality care for business applications.
- B. IT may not have sufficient staffing to care for business applications properly.
- C. IT may have insufficient knowledge of business operations to make good decisions.
- D. Business departments might not give IT sufficient access to manage applications properly.
Correct

Incorrect

Scroll to Top

Insert/edit link

Enter the destination URL

URL

Link Text

Open link in a new tab

Or link to existing content

Search

No search term specified. Showing recent items. Search or use up and down arrow keys to select an item.

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question