Preparation CISM Practice Questions (Page 7)

Questions 31–33

1. 31foundation · easy

   What is the PRIMARY goal of incident management training?

   • ATo replace the need for an incident response plan
   • BTo certify team members in ethical hacking
   • CTo ensure team members understand their roles, procedures, and communication protocols
   • DTo ensure all employees have the same technical skills
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which of the following is the PRIMARY purpose of an incident response plan (IRP)?

   • ATo define the organization's overall security architecture and technology stack
   • BTo document the organization's compliance with regulatory requirements
   • CTo ensure all employees receive annual security awareness training
   • DTo provide a structured approach for detecting, responding to, and recovering from security incidents
   Reveal Solution Discussion Select an answer first
3. 33application · medium

   A security operations center (SOC) receives the following alerts simultaneously: (1) a phishing email that was blocked by the gateway, (2) a workstation infected with ransomware that is encrypting files, and (3) a failed login attempt on a legacy system. The SOC has limited staff. How should the SOC prioritize these incidents?

   • ATreat all three incidents equally and assign one analyst to each.
   • BRespond to the failed login first, then the phishing email, and finally the ransomware.
   • CRespond to the phishing email first, then the ransomware, and finally the failed login.
   • DRespond to the ransomware first, then the phishing email, and finally the failed login.
   Reveal Solution Discussion Select an answer first