Program Implementation and Operations CISM Practice Questions (Page 7)

Questions 31–32

1. 31application · medium

   A small business has a limited budget and needs to protect customer data. The risk assessment shows that the most likely threat is phishing attacks leading to credential compromise. Which control would be the most cost-effective choice?

   • AImplement multi-factor authentication (MFA) for all user accounts
   • BDeploy an expensive next-generation firewall with advanced threat detection
   • CHire a full-time security analyst to monitor for phishing attempts
   • DPurchase cyber insurance to cover potential losses
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which of the following must be considered when designing security controls?

   • AThe number of security incidents in other organizations
   • BThe cost of the control only
   • CThe personal preferences of the security manager
   • DThe organizational context and regulatory requirements
   Reveal Solution Discussion Select an answer first