CISM Exam Practice Questions

D

Correct answer: Diverse routing Diverse routing is utilizing a split cable or duplicate cable facility. It does include the situation where the two cables can be in the same conduit. Alternative routing is using an alternate medium, so if they are worried about cable, the alternative could be fiber. A Storage Area Network (SAN) is a network of servers that are configured for maximum storage capacity. A direct-attached storage is plugged in directly to the machine that needs it.CISM Review Manual, 16th Edition. Pg 277.

B

Correct answer: Enough to run their data center until they have moved to their backup site Enough fuel to meet regulatory requirements might be the correct answer, but depending on the bank's other priorities, the regulation's requirement may not be enough fuel. So a more generic statement of "enough" is a better answer given the limited amount of information in the question. Twenty-four hours or three days also might be the right number, but given the lack of details in the question, we cannot be that specific with the answer.CISM Review Manual, 16th Edition. Pg 292–293.

C

Correct answer: A computer beeping upon booting for the first time A computer beeping upon booting for the first time could be an indication of a POST (power-on self-test) code. This can be an indicator of a variety of things, such as misconfigured RAM. It is not an indicator of malware infection. A command prompt window flashing and disappearing can be an indicator of malware utilizing a terminal to input code. A computer becoming sluggish can be a sign of resource use from a malware program, but, as this could tip off the user that they have an infection, malware may not do this. Files becoming randomly inaccessible could be a sign of a ransomware infection.CISM Review Manual, 16th Edition. Pg 258-261.

D

Correct answer: Constituency Consituency is knowing who the stateholders are. It is also identifying their expectations and needs. Services provided by the Incident Management Team (IMT) should be defined to manage expectations. Resources include having sufficient and qualified staffing. Mission is the goals and objectives of the IMT.CISM Review Manual, 16th Edition. Pg 262.

D

Correct answer: External assessment An external assessment should give the most comprehensive view. A self-assessment or internal audit is probably the easiest option, but they are done against specific criteria and are limited in their view. A survey of senior management is a valuable thing to do, but it will not be the most comprehensive. It is good to obtain their goals and objectives, as well as their current perception of the incident management that does currently exist.CISM Review Manual, 16th Edition. Pg 267.