BCS CISMP QUESTION BANK AND ANSWERS WITH COMPLETE
SOLUTIONS 100% VERIFIED
As an IS Manager, you would like to lay down clearly-defined roles and
responsibilities? What is the BEST benefit that you expect?
Your team is more accountable.
Who would you look to enforce access rights to application data?
Security administrators.
You need to get approval from senior management to implement a warm site.
How can you BEST achieve this?
Present a business case with cost-benefit analyses.
As an IS Manager, you are developing IS Strategy for your organization. Which is
the MOST important component of the strategy?
Well defined objective
Which of the following is MOST important to understand when developing a
meaningful information security strategy?
Organizational goals
You are implementing IS policy within your organization. There is a sense of
discomfort from within the organization about certain components of the policy.
What is the BEST approach to counter this?
Obtain strong management support
, You have joined an organization recently as an IS Manager. You have requested a
meeting with the senior management to discuss organization's network security
to the senior management. What would you present FIRST?
Present the risk assessment report.
You are an IS Manager of an ecommerce portal. You have seen in the media about
a new regulation that affects ecommerce transactions. What should you do
FIRST?
Check whether the controls in the existing ecommerce portal can address the
regulations.
Which of the following would help to change an organization's security culture?
Obtain strong management support
The PRIMARY goal in developing an information security strategy is to:
Support the business objectives of the organization.
The MOST important reason for aligning information security governance with
corporate governance is to:
Provide cost-benefit to the organization.
A systems approach to managing information security can be a benefit
PRIMARILY because it is:
Able to provide a more integrated, holistic program.
An information security manager must understand the relationship between
information security and business operations in order to:
Support organizational objectives.
SOLUTIONS 100% VERIFIED
As an IS Manager, you would like to lay down clearly-defined roles and
responsibilities? What is the BEST benefit that you expect?
Your team is more accountable.
Who would you look to enforce access rights to application data?
Security administrators.
You need to get approval from senior management to implement a warm site.
How can you BEST achieve this?
Present a business case with cost-benefit analyses.
As an IS Manager, you are developing IS Strategy for your organization. Which is
the MOST important component of the strategy?
Well defined objective
Which of the following is MOST important to understand when developing a
meaningful information security strategy?
Organizational goals
You are implementing IS policy within your organization. There is a sense of
discomfort from within the organization about certain components of the policy.
What is the BEST approach to counter this?
Obtain strong management support
, You have joined an organization recently as an IS Manager. You have requested a
meeting with the senior management to discuss organization's network security
to the senior management. What would you present FIRST?
Present the risk assessment report.
You are an IS Manager of an ecommerce portal. You have seen in the media about
a new regulation that affects ecommerce transactions. What should you do
FIRST?
Check whether the controls in the existing ecommerce portal can address the
regulations.
Which of the following would help to change an organization's security culture?
Obtain strong management support
The PRIMARY goal in developing an information security strategy is to:
Support the business objectives of the organization.
The MOST important reason for aligning information security governance with
corporate governance is to:
Provide cost-benefit to the organization.
A systems approach to managing information security can be a benefit
PRIMARILY because it is:
Able to provide a more integrated, holistic program.
An information security manager must understand the relationship between
information security and business operations in order to:
Support organizational objectives.
