Emerging Risk and Threat Landscape CISM Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A security analyst notices a sharp increase in phishing emails that use deepfake audio of the CEO's voice to authorize urgent wire transfers. The CISO needs to analyze this threat. Which aspect of threat landscape analysis is most relevant?

   • ASupply chain dependency review
   • BAttack vector and threat actor motivation
   • CRegulatory impact assessment
   • DGeopolitical risk evaluation
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   How can new and upcoming regulations introduce emerging risks to an organization?

   • ABy creating compliance obligations that the organization may not yet be prepared to meet
   • BBy eliminating the need for internal risk assessments
   • CBy providing a guarantee of immunity from cyber attacks
   • DBy automatically reducing the organization's overall risk exposure
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which of the following is an example of a supply chain dependency that could introduce emerging risk?

   • ARelying on a single supplier for a critical component used in the organization's product
   • BMaintaining multiple suppliers for the same component
   • CStockpiling a six-month inventory of the component
   • DHaving an in-house manufacturing capability for the component
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A financial services firm wants to proactively identify emerging cyber threats before they materialize. Which approach best exemplifies horizon scanning?

   • AMonitoring dark web forums and threat intelligence feeds for discussions about new exploit techniques
   • BImplementing a new firewall to block known malicious IP addresses
   • CReviewing past security incidents to identify recurring patterns
   • DConducting an annual penetration test of the internal network
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is a key risk implication of quantum computing for information security?

   • AIt will make all current encryption algorithms obsolete immediately
   • BIt has the potential to break widely used public-key cryptography in the future
   • CIt will eliminate the need for cryptographic key management
   • DIt will only affect legacy systems and not modern applications
   Reveal Solution Discussion Select an answer first