Preview a few questions below — answers are revealed when you take the
exam.
-
A multinational corporation is experiencing frequent data breaches due to outdated security protocols. The CISM is tasked with overhauling the security framework. What strategy should be applied when integrating advanced threat detection systems with existing infrastructure to minimize disruption and maximize security?
- Implement a phased rollout of the new threat detection systems, starting with the most critical assets and gradually expanding to less critical areas while continuously monitoring and adjusting the integration process.
- Adopt a big-bang approach by simultaneously deploying the new threat detection systems across the entire organization to ensure uniform security standards are met immediately.
- Outsource the entire security framework overhaul to a third-party vendor specializing in threat detection to leverage their expertise and reduce the burden on internal resources.
- Focus solely on upgrading the existing security protocols without integrating new threat detection systems, as the current infrastructure may still be sufficient with proper maintenance.
-
In a scenario where a company's incident response plan has failed to contain a recent cyber attack, leading to significant data loss, which method solves it best for evaluating the effectiveness of the incident response plan and identifying areas for improvement?
- Conduct a comprehensive post-mortem analysis involving all stakeholders to review the incident response plan's execution, identify gaps, and develop actionable recommendations for enhancement.
- Blame the incident response team for the failure and replace them with a new team to ensure a fresh perspective on handling future incidents.
- Ignore the incident as a one-time occurrence and continue with the current incident response plan without any modifications.
- Focus on enhancing the company's public relations strategy to mitigate the negative impact of the data loss on the company's reputation.
-
Identify the command used in Linux to check the integrity of a file using SHA-256 hashing.
- sha256sum
- checksum
- hashcheck
- fileintegrity
-
Select the best practice that should be followed if an organization detects a potential security breach within its network.
- Immediately disconnect all network devices to prevent further damage.
- Notify all employees about the breach to ensure they are aware of the situation.
- Follow the incident response plan to contain, eradicate, and recover from the breach.
- Publicly announce the breach to maintain transparency with stakeholders.
-
What configuration is most appropriate for implementing a zero-trust security model in a large enterprise with multiple remote offices?
- Deploy a centralized identity and access management system that verifies every user and device attempting to access resources, regardless of their location within the network.
- Rely solely on traditional perimeter-based security measures, such as firewalls and intrusion detection systems, to protect the network.
- Implement a bring-your-own-device (BYOD) policy to allow employees to use their personal devices for work-related tasks.
- Disable all remote access capabilities to prevent unauthorized users from accessing the network.