Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Isaca CISM Exam - Topic 5 Question 65 Discussion

Posted by Carin on Nov 22, 2023 at 03:57 PM

The PRIMARY objective of timely declaration of a disaster is to:

Suggested Answer: B

The greatest concern with the situation of privileged employee access requests to production servers being approved but not logged is the lack of accountability, which means the inability to trace or verify the actions and decisions of the privileged users. Lack of accountability can lead to security risks such as unauthorized changes, data breaches, fraud, or misuse of privileges. Logging user actions is a key component of privileged access management (PAM), which helps to monitor, detect, and prevent unauthorized privileged access to critical resources. The other options, such as lack of availability, improper authorization, or inadequate authentication, are not directly related to the situation of not logging user actions. Reference:

https://www.microsoft.com/en-us/security/business/security-101/what-is-privileged-access-management-pam

https://www.ekransystem.com/en/blog/privileged-user-monitoring-best-practices

https://www.beyondtrust.com/resources/glossary/privileged-access-management-pam


Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
42 comments · newest first
SC
Scarlet 11 months ago
Definitely D, essential services must keep running!
BE
Ben 11 months ago
Protecting assets is super important too!
CE
Cecil 11 months ago
Wait, is that really the primary objective?
MI
Miesha 11 months ago
Totally agree, it's all about continuity!
FR
Franklyn 11 months ago
Timely declaration helps in resource allocation.
HE
Hector 12 months ago
I’m a bit confused; I thought the main goal was to assess deficiencies, but now I’m not so certain.
TA
Tandra 12 months ago
I’m leaning towards option D, but I could see how engaging management could also be a key part of the process.
JA
Jackie 12 months ago
I remember a practice question that focused on protecting physical assets, but I feel like that might be more of a secondary goal.
ED
Edna 1 year ago
I think the primary objective is about ensuring continuity of essential services, but I'm not completely sure.
GL
Glory 1 year ago
Ugh, this is a tricky one. I'm torn between a few of the options, and I don't want to overthink it. I'll just go with my best guess and move on to the next question.
CO
Coletta 1 year ago
Aha, I think I've got it! The key here is the "primary objective" part of the question. Option D seems to capture the core purpose of ensuring the organization's essential services continue, which is likely the main goal of a timely disaster declaration.
LU
Lucina 1 year ago
Hmm, I'm not entirely sure about this one. The options seem a bit similar, and I want to make sure I understand the nuance between them. Let me think this through step-by-step.
CE
Cecilia 1 year ago
This seems like a straightforward question about the purpose of declaring a disaster. I'll carefully read through the options and choose the one that best matches the primary objective.
MA
Mariko 1 year ago
This question seems straightforward. I think the key is to focus on the NTFS security and QlikView Management Service requirements.
LE
Leanora 1 year ago
This is a good question to test our understanding of Server Protect's functionality. I think the answer is C, but I'll double-check the details just to be sure.
TH
Theresia 1 year ago
I feel like this scenario really highlights peer pressure, but I'm not entirely sure if it's more about corporate culture influencing behavior too.
HE
Herschel 1 year ago
Disaster declaration? I declare this question a disaster! Let's just move on to the next one before the building burns down around us.
EL
Elli 1 year ago
↳ replying to Herschel
C) assess and correct disaster recovery process deficiencies.
WI
Willodean 1 year ago
↳ replying to Herschel
B) protect critical physical assets from further loss.
AN
Antione 1 year ago
↳ replying to Herschel
A) ensure the continuity of the organization's essential services.
JI
Jin 1 year ago
Disaster? What disaster? I'm just gonna work on my tan and let the IT department handle it. As long as the wifi's still up, I'm good!
FR
Frankie 1 year ago
↳ replying to Jin
D) ensure engagement of business management in the recovery process.
BE
Bette 1 year ago
↳ replying to Jin
B) protect critical physical assets from further loss.
JA
Jaclyn 1 year ago
↳ replying to Jin
A) ensure the continuity of the organization's essential services.
DA
Daron 1 year ago
D, because you need that business management involvement to get the recovery process moving. Without them, you're just sitting around waiting for the IT guys to work their magic.
AV
Avery 1 year ago
↳ replying to Daron
D) ensure engagement of business management in the recovery process.
AD
Adolph 1 year ago
↳ replying to Daron
B) protect critical physical assets from further loss.
LE
Letha 1 year ago
↳ replying to Daron
A) ensure the continuity of the organization's essential services.
MI
Minna 1 year ago
C, all the way. You gotta use those disaster recovery deficiencies as a learning experience, right? Mistakes were made, let's make sure they don't happen again.
LA
Launa 1 year ago
I'm going with B. Protecting those critical assets is the top priority, otherwise you'll be starting from scratch after the disaster.
AN
Anjelica 1 year ago
↳ replying to Launa
I think engaging business management in the recovery process is also key to a successful recovery.
AL
Alverta 1 year ago
↳ replying to Launa
That's true, without essential services, the organization may struggle to recover effectively.
LA
Lavonne 1 year ago
↳ replying to Launa
But don't you think ensuring the continuity of essential services is just as important?
HU
Huey 1 year ago
↳ replying to Launa
I agree, protecting critical assets is crucial to minimize losses.
NI
Niesha 1 year ago
A is definitely the primary objective. I mean, what's the point of recovering assets if you can't even keep your essential services running?
AU
Audry 1 year ago
↳ replying to Niesha
Yes, without essential services, the organization would struggle to recover effectively.
LE
Leanna 1 year ago
↳ replying to Niesha
I agree, keeping essential services running is crucial in a disaster.
MA
Marvel 1 year ago
↳ replying to Niesha
B) protect critical physical assets from further loss.
MI
Michell 1 year ago
↳ replying to Niesha
A) ensure the continuity of the organization's essential services.
TE
Teddy 2 years ago
I believe protecting critical physical assets is also crucial to the recovery process.
CH
Charlene 2 years ago
I agree with Wilda, it's important to keep the organization running smoothly.
WI
Wilda 2 years ago
I think the primary objective is to ensure continuity of essential services.
0/2000 characters

Save Cancel