CISM 試験問題を無料オンラインアクセス

Which of the following BEST describes a buffer overflow?

• A.A type of covert channel that captures data
• B.Malicious code designed to interfere with normal operations
• C.A function is carried out with more data than the function can handle
• D.A program contains a hidden and unintended function that presents a security risk

To effectively manage an organization ' s information security risk, it is MOST important to:

• A.establish and communicate risk tolerance.
• B.assign risk management responsibility to an experienced consultant.
• C.benchmark risk scenarios against peer organizations.
• D.periodically identify and correct new systems vulnerabilities.

Which of the following is MOST important when designing an information security governance framework?

• A.Aligning with the information security strategy
• B.Assessing the current state of information security
• C.Aligning with industry best practice frameworks
• D.Assessing the availability of information security resources

Which of the following is the PRIMARY outcome of a business impact analysis (BIA)?

• A.Identification of critical business functions and prioritization of recovery efforts
• B.Allocation of budget for technical security controls and enhancements to security culture
• C.Assurance of compliance with industry-specific regulations and improvement to business processes
• D.Streamlining of event triage and implementation of incident response procedures

Which of the following is the PRIMARY preventive method to mitigate risks associated with privileged accounts?

• A.Frequently monitor activities on privileged accounts.
• B.Provide privileged account access only to users who need it.
• C.Eliminate privileged accounts.
• D.Perform periodic certification of access to privileged accounts.