CISM Exam Study Guide with Complete Solutions

CISM Exam Study Guide with Complete Solutions One - Answer️️ -One Two - Answer️️ -Two Acceptable use policy - Answer️️ -A policy that establishes an agreement between users and the organization, and defines for all parties' ranges of use that are approved before gaining access to a network or the Internet Access controls - Answer️️ -The processes, rules and deployment mechanisms that control access to information systems, resources and physical access to premises Access path - Answer️️ -The logical route that an end user takes to access computerized information. Typically, it includes a route through the operating system, telecommunications software, selected application software and the access control system. Access rights - Answer️️ -The permission or privileges granted to users, programs or workstations to create, change, delete or view data and files within a system, as defined by rules established by data owners and the information security policy ©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM 2 Accountability - Answer️️ -The ability to map a given activity or event back to the responsible party Action plan - Answer️️ -A plan for the steps necessary to navigate the roadmap to achieve objectives Ad hoc - Answer️️ -Arbitrary approach, no formal plan or process Adware - Answer️️ -Any software package that automatically plays, displays or downloads advertising material to a computer after the software is installed on it or while the application is being used. In most cases, this is done without any notification to the user or without the user's consent. The term adware may also refer to software that displays advertisements, whether or not it does so with the user's consent; such programs display advertisements as an alternative to shareware registration fees. These are classified as adware in the sense of advertising- supported software, but not as spyware. Adware in this form does not operate surreptitiously or mislead the user, and provides the user with a specific service. Advance Encryption Standard (AES) - Answer️️ -The international encryption standard that replaced 3DES. ©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM 3 Algorithm - Answer️️ -A finite set of step-by-step instructions for a problem- solving or computation procedure, especially one that can be implemented by a computer. Anomaly-Based Detection - Answer️️ -The process of comparing definitions of what activity is considered normal against observed events to identify significant deviations. This approach is used on some intrusion detection systems. Annual Loss Expectation (ALE) - Answer️️ -The total expected loss divided by the number of years in the forecast period yielding the average annual loss Alert situation - Answer️️ -The point in an emergency procedure when the elapsed time passes a threshold and the interruption is not resolved. The organization entering into an alert situation initiates a series of escalation steps. Alternate facilities - Answer️️ -Locations and infrastructures from which emergency or backup processes are executed, when the main premises are unavailable or destroyed. This includes other buildings, offices or data processing centers. Alternate process - Answer️️ -Automatic or manual processes designed and established to continue critical business processes from point-of-failure to return- to-normal ©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM 4 Anonymous File Transfer Protocol (AFTP) - Answer️️ -A method of downloading public files using the File Transfer Protocol (FTP). AFTP does not require users to identify themselves before accessing files from a particular server. In general, users enter the word "anonymous" when the host prompts for a username. Anything can be entered for the password, such as the user's e-mail address or simply the word "guest." In many cases, an AFTP site will not prompt a user for a name and password. Antivirus software - Answer️️ -An application software deployed at multiple points in an IT architecture. It is designed to detect and potentially eliminate virus code before damage is done, and repair or quarantine files that have already been infected Application Programming Interface (API) - Answer️️ -An application programming interface (API) is a source code-based specification intended to be used as an interface by software components to communicate with each other. Application controls - Answer️️ -The policies, procedures and activities designed to provide reasonable assurance that objectives relevant to a given automated solution (application) are achieved ©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM 5 Application layers - Answer️️ -In the Open Systems Interconnection (OSI) communications model, the application layer provides services for an application program to ensure that effective communication with another application program in a network is possible. The application layer is not the application that is doing the communication; it is a service layer that provides these services. Application service provider (ASP) - Answer️️ -Also known as managed service provider (MSP), it deploys, hosts and manages access to a packaged application to multiple parties from a centrally managed facility. The applications are delivered over networks on a subscription basis. Architecture - Answer️️ -Description of the fundamental underlying design of the components of the business system, or of one element of the business system (e.g., technology), the relationships among them, and the manner in which they support the organization's objectives ARP (see also RARP) - Answer️️ -ARP defines the exchanges between network interfaces connected to an Ethernet media segment in order to map an IP address to a link layer address on demand. Assurance - Answer️️ -The grounds for confidence that the set of intended security controls in an information system are effective in their application. ©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM 6 Assurance Process Integration - Answer️️ -Integration of organizational assurance processes to achieve greater efficiencies and counter typical silo effects. Assymetric encryption - Answer️️ -A cryptographic key that may be widely published and is used to enable the operation of an asymmetric cr