Discuss Isaca CISM Exam Topic 5 Question 34

Which of the following is an information security manager's BEST course of Action when a threat intelligence report indicates a large number of ransomware attacks targeting the industry?

AAssess the risk to the organization.

BNotify staff members of the threat.

CIncrease the frequency of system backups.

DReview the mitigating security controls.

Suggested Answer: B

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

16 comments · newest first

Queenie 11 months ago

Wait, are ransomware attacks really that common now?

Sarah 12 months ago

I think reviewing security controls is crucial too.

Cathrine 12 months ago

Increasing backups is a smart move!

Frederica 12 months ago

Not sure if notifying staff is enough.

Nakisha 1 year ago

Definitely should assess the risk first!

Cathrine 1 year ago

I feel like reviewing mitigating security controls could help us understand our vulnerabilities better, but I’m not entirely confident about the order of actions.

Ardella 1 year ago

Increasing the frequency of backups sounds like a good idea, but I wonder if reviewing security controls might be more effective in the long run.

Mira 1 year ago

I remember a practice question where notifying staff was important, but I feel like we need to do more than just that.

Buck 1 year ago

I think assessing the risk to the organization is crucial, but I'm not sure if it's the best immediate action.

Alayna 1 year ago

Hmm, I'm not entirely sure about this one. The options seem a bit broad, and I'm not confident I fully understand the specific implications of digitization in this context. I'll have to think it through.

Elvera 1 year ago

I definitely recall that in a BGP route reflector setup, you usually need to designate clients correctly. I lean towards A and E based on what I studied.

Louvenia 1 year ago

Okay, I think I've got it. Based on Roberta's findings about low-level employees having access to all customer data, including financial records, and the lack of proper data purging procedures, option A seems like the most plausible explanation for the breach. I'll go with that.

Temeka 1 year ago

Option A looks like the most direct solution - creating a custom self-registration page and Apex handler to create person accounts. That seems like the cleanest way to ensure the new users are properly captured.

Doretha 1 year ago

I'm a bit unsure here; are public donations really an opportunity if they're declining? I feel like A and B might not fit.

Romana 1 year ago

Not sure, but I think centerless architecture is a characteristic of some NoSQL databases, but does that apply to Alibaba's service?

Ulysses 1 year ago

This looks like a straightforward question on secure email protocols. I'm pretty confident I can get this one right.

Isaca CISM Exam - Topic 5 Question 34 Discussion