MENU
Which of the following is MOST likely to be included in an enterprise information security policy?
Suggested Answer: B
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
15 comments · newest first
GA
Gaynell
11 months ago
Not sure if A is the most likely, seems too basic for a policy.
AL
Alita
12 months ago
Surprised that D isn't mentioned more, monitoring is key!
BL
Blair
12 months ago
C is crucial too, can't skip audit trails!
NI
Nilsa
12 months ago
I think B is more important, noncompliance needs clear consequences.
AN
Anisha
1 year ago
Definitely A, password rules are a must!
EL
Eladia
1 year ago
Security monitoring strategy sounds crucial, but I wonder if it's too detailed for an enterprise policy. I guess it depends on the organization.
EL
Eloisa
1 year ago
Audit trail review requirements seem like they could be part of a security policy, but I feel like they might be more operational than policy-related.
ME
Merlyn
1 year ago
I remember a practice question that emphasized consequences of noncompliance as a key part of security policies. That might be the answer.
JO
Jodi
1 year ago
I think password composition requirements are important, but I'm not sure if they belong in the main policy.
DO
Donte
1 year ago
Hmm, I'm a bit confused about the persistent storage part. Do we need to create a separate directory for the journal files, or can we just mount the /var/log/journal directory directly?
WE
Wei
1 year ago
Okay, I've got this. The question is asking which events the company must notify the NYSE about. Based on the options, it looks like the answer is D - all of the listed events, including changes to the business, officers/directors, and independent accountants. I'm confident that's the right answer.
MO
Monroe
1 year ago
I'm leaning towards "Design" because I feel like we're beginning to shape the website's structure. But I still have doubts about whether it could also be "Develop."
MA
Maryann
1 year ago
This one seems straightforward - the question is asking about a drug that inhibits xanthine oxidase and affects the metabolism of 6-mercaptopurine. Based on that, I think the answer is B. Allopurinol.
MA
Martha
1 year ago
Building risk-free systems? That doesn't sound quite right. I think the focus should be on managing and mitigating risks, not eliminating them entirely. Let me think this through again.
MA
Marci
1 year ago
I'm a bit confused on whether the expense should be measured at the grant date fair value or the reporting date fair value. I'll need to review the IFRS 2 guidance carefully.