CISM Exam Practice Questions

A

Correct answer: Disaster Recovery as a Service (DRaaS) DRaaS would be one of the most cost-effective options. The company does not need to lease another site. They do not need to supply hardware and software at that site. They only pay for the service that they are using. Most of the time, it would be a very small bill to have the virtual servers, router, and switches built, but not active. Only once there is a disaster and they are processing data would there be a bill of any sizable amount. A cold site and hot site both require leasing or purchasing an actual building, and that alone is not that cheap. A hot site also already has all of the hardware and software there, set up and maintained, waiting for the day of the disaster-level failure. A cold site will take a long time to become operational, which does not match the needs of the company. A mobile site can be transported fairly quickly to the needed location, but that really depends on the actual distance it must travel. It can be equipped with hardware and such activity, but it will take longer to bring that active compared to a DRaaS solution.CISM Review Manual, 16th Edition. Pg 284–285.

D

Correct answer: Paper test A paper test involves mapping out a critical incident on paper. These tests are essentially a walkthrough with a diagram included, and they occur early in the testing phase of a response recovery plan. A preparedness test is a localized test where a simulation occurs and brings the plan to life, allowing the faults or benefits of the plan to become more visible. They can be broken into parts and also evaluated in parts, allowing for a more granular approach to creating a disaster recovery plan. A full operational test will test the complete plan with a test that falls just short of an actual outage or incident. Diagram tests are not an actual term associated with the exam. CISM Review Manual, 16th Edition. Pg 295-296.

A

Correct answer: Alternative routing Alternative routing utilizes an alternate medium for transmission, such as a microwave connection. Diverse routing involves duplicate cable facilities or split cable facilities. Diverse routing may include two cables that are in the same conduit, making alternative routing a better answer. Voice recovery does involve redundant cabling and alternative routing, but the question is about the processing of credit cards. A virtual machine is a guest operating system running within a computer or server that has an initial host operating system.CISM Review Manual, 16th Edition. Pg 277.

D

Correct answer: Network Attached Storage (NAS) NAS storage devices are on the same network as the servers and clients, most likely ethernet today. A SAN is a network dedicated to storage devices, usually Fibre Channel or iSCSI networks. A DAS is plugged directly into the client or server. RAID is a mechanism to have multiple drives inside of a single server working together in a specific way.CISM Review Manual, 16th Edition. Pg 278–279.

D

Correct answer: Ten failed authentication attempts in ten minutes Ten failed authentication attempts in ten minutes is a clear metric that there is some risk of a breach. This is a prime example of a key risk indicator (KRI). Three ping sweeps is normal for something public-facing — anything directly open to the public is going to constantly be scanned. Vulnerability scan results may be an indicator, but the scan itself does not indicate if any vulnerability was found. A CVSS score is a KRI, but a score of 2.1 is so low that it does not need to be remediated right away and is not as important as an active attempted breach occurring through failed authentication attempts.CISM Review Manual, 16th Edition. Pg 291.