Free CIPM Exam Dumps Preview

The Business Continuity Plan (BCP) has multiple components. The information security plan portion must prioritize its efforts.

Which 3 aspects of information security MUST be prioritized?

Which specification enables organizations to ensure penetration test results are documented using open, machine-readable standards?

Which of the following production activity control (PAC) techniques focuses on optimizing output?

Which of the following controls should a financial Institution have in place in order to prevent a trader from both entering and executing a trade?

An organization decides to conduct penetration testing. Senior management is concerned about the potential loss of information through data exfiltration. The organization is currently preparing a major product launch that is time-sensitive.

Which of the following methods of testing is MOST appropriate?

While conducting an information asset audit, it was determined that several devices were running unpatched Operating Systems (0S). Further review Indicated the OS was no longer supported by the vendor.

Which of the following BEST indicates the appropriate asset lifecycle stage of the devices?

Preventive maintenance plus continuing efforts to adapt, modify, and refine equipment to increase flexibility, reduce material handling, and promote continuous flow, is called:

In order to meet retention requirements, it may be necessary to migrate digital records to different media because of which of the following issues?

Which of the following actions hinders the transition from a push system to a pull system?

Which of the following prioritization rules will have the greatest impact In reducing the number of orders In queue?

Which of the following methods places a replenishment order when the quantity on hand falls below a predetermined level?

Which of the following states of data becomes MOST important to protect as organizations continue to transition toward Application Programming Interface (API)-based solutions?

Which of the following protocols BEST provides for the secure transfer of voice, data, and video over a network?

If organizational leadership determines that its required continuous monitoring plan is too costly for the organization, what action should be taken by leadership and the Authorizing Official (AO)?

What is the MAIN reason security is considered as part of the system design phase instead of deferring to later phases?

A financial organization is using an internally developed application. The internal software development team has to adhere to the coding standards of the Software Development Cycle (SDLC). For applications whose functionality is exposed through the public Internet, this requirement consists of testing the application for potential vulnerabilities before it is deployed into production.

What is the BEST type of vulnerability test to perform?

Exhibit:

A company has prioritized customers A, B, and C, filling orders in that sequence.

What are the impacts to customer service levels for customers B and C?

What BEST describes the end goal of a Disaster Recovery (DR) program?

The trade-off of increasing safety stock to improve customer fill rate would be a decrease in:

A security analyst has been asked to build a data retention policy for a hospital.

What is the FIRST action that needs to be performed in building this policy?

Which authentication method is used by an email server to verify that a sender's Internet Protocol (IP) address is authorized to send messages by the sending domain?

Which of the following MUST be checked during the validation of software verification capabilities?

The primary reason for tracing a component with scheduling problems to Its master production schedule (MPS) item is to:

A company confirms a customer order based on available capacity and inventory, even though the current production plan does not cover the entire order quantity.
This situation is an example of what type of order fulfillment policy?

Forecast error typically triggers forecast revision when it is:

Which of the following inventory management techniques is most responsive to changes in demand levels?

Database security includes which of the following requirements?

If company uses other companies or individuals to distribute some or all of its products to the final consumer, these companies or individuals are called:

Which of the following MUST be checked during the validation of software verification capabilities?

Privacy requirements across national boundaries MOST often require protection of which data types?

What consist of a series of operations required to make the item?

A security team is analyzing the management of data within the human resources systems, as well as, the intended use of the data, and with whom and how the data will be shareD:

Which type of assessment is the team MOST likely performing?

Which of the following is the BEST solution to implement to mitigate the risk of data breach in the event of a lost or stolen mobile device?

A webmaster has repeatedly used the same certificate sign request to renew an organization's website Secure Sockets Layer (SSL) certificate.

What is the MOST significant increased risk for the organization?

During an onsite audit, an assessor inspected an organization's asset decommission practice.

Which of the following would MOST likely be a finding from a security point of view?

Maintaining software asset security is MOST dependent on what information?

An organization has hired a consultant to establish their Identity and Access Management (IAM) system.
One of the consultant's main priorities will be to understand the current state and establish visibility across the environment.

How can the consultant start to establish an IAM governance process?

An information security auditor is creating an audit program to assess endpoint security controls for portable storage media movement.

Which type of control will MOST likely be part of the program?

A large organization that processes protected data issues preconfigured laptops to workers who then access systems and data based on their role. As their technology ages, these laptops are replaced with newer devices.

What is the BEST solution to mitigate risk associated with these devices?

The master schedule is an Important tool in the sales and operations planning (S&OP) process because it:

Over a period of 4 weeks, a work center produced 50, 45, 40, and standard house of work.

What is the demonstrated capacity of the work center?

A security officer has been tasked with performing security assessments on the organization's in the current calendar year. While collecting data, the officer realizes that more than one business until will be engaged in the assessment.

What activity MUST be included in the data collection phase?

What attempts to prevent the production of defects by showing that when the standard deviation increases there is an assignable cause for variation?

A security consultant is recommending the implementation of a security-focused Configuration Management (CM) process in an organization.

What would be the BEST benefit the security consultant would include in the recommendation?

The question below is based on the following information:

Beginning inventory = 43

Week 1 | Week 2 | Week 3

Forecast: 20 | 20 | 20

Customer orders: 22 | 17 | 10

Projected on-hand: ?

Master production schedule (MPS): - | - | 80

Available-to-promise (ATP): ?

What is the largest customer order that could be accepted for delivery at the end of week 3 without making changes to the master production schedule (MPS)?

The primary consideration In maintenance, repair, and operating (MRO) supply systems typically is:

The development team wants new commercial software to integrate into the current system.

What steps can the security office take to ensure the software has no vulnerabilities?

A financial institution is implementing an Information Technology (IT) asset management system.

Which of the following capabilities is the MOST important to include?

At the MRP planning level, the process of priority plans must be checked against available capacity is called

An organization's system engineer arranged a meeting with the system owner and a few major stakeholders to finalize the feasibility analysis for a new application.

Which of the following topics will MOST likely be on the agenda?

A company implementing a localized multi-country strategy to increase market share should engage in which of the following actions?

Which of the following is MOST accurate when comparing patch management and vulnerability management?

Which of the below represent the GREATEST cloud-specific policy and organizational risk?

Business management should be engaged in the creation of Business Continuity (BC) and Disaster Recovery plans (DRP) because they need to

Which of the following BEST describes the responsibility of an information System Security Officer?

Which of the following should recommendations from a Plan Of Action And Milestones (POA&M) be based on?

A Software As A Service (SaaS) solution was compromised due to multiple missing security controls.

The SaaS deployment was rushed and the Software Development Life Cycle (SDLC) was not followeD: Which SDLC phase would have been MOST effective in preventing this failure?

From a technical perspective, Six Sigma is achieved when the process capability is equal to at least 1.

Which compensating control is the MOST effective to prevent fraud within an organization?

Which of the following is the benefit of using Security Content Automation Protocol (SCAP) version 2 on endpoint devices?

The time spent In queue by a specific manufacturing job is determined by which of the following factors related to the order?

The orders are automatically scheduled and controlled by the computer are the orders called:

An independent risk assessment determined that a hospital's existing policies did not have a formal process in place to address system misuse, abuse, or fraudulent activity by internal users.

Which of the following would BEST address this deficiency in the Corrective Action Plan?

Which of the following is NOT the role that warehouses serve?

Why would a network administrator monitor Internet of Things (IoT) security differently than the security of standards network devices?

An organization has been the subject of increasingly sophisticated phishing campaigns in recent months and has detected unauthorized access attempts against its Virtual Private Network (VPN) concentrators.

Which of the following implementations would have the GREATEST impact on reducing the risk of credential compromise?

Planning bill does not represent

Which protocol is the BEST option to provide authentication, confidentiality, and data integrity between two applications?

While conducting penetration testing, one of the testers noticed evidence of additional penetration activities not part of the test.

Which of the following is the NEXT course of action for the lead penetration tester?

During the initiation phase of a project to acquire a customer relation management system, what is the FIRST step a project team will take for early integration of security?

An organization has integrated its enterprise resource planning system into its centralized Identity and Access Management (IAM) system to automate provisioning of access. A security audit revealed that privileged access granted within the ERP system is not visible in the IAM system.

Which of the following controls BEST mitigates this risk?

An organization's security policy requires remote hosts to be authenticated before they can access network resources.

Which of the following is the BEST option for the organization to enforce its policy?

An organization donates used computer equipment to a non-profit group. A system administrator used a degausser on both the magnetic and Solid State Drives (SSD) before delivery. A volunteer at the non-profit group discovered some of the drives still contained readable data and alerted the system administrator.

What is the BEST solution to ensure that computer equipment does not contain data before release?

A statistical safety stock calculation would be appropriate for:

Which of the following is an information security management framework?

Which four primary plant types are defined, and they are used to specify the flow of materials through a production process?

Which of the following represents the level of confidence that software is free from intentional an accidental vulnerabilities?

Are determined by the computer's material requirement plan logic based upon the gross requirements for a particular part.

A security practitioner has been asked to investigate the presence of customer Personally Identifiable Information (PII) on a social media website.

Where does the practitioner begin?

What is the MAIN benefit of network segmentation?

If all other factors remain the same, when finished goods inventory investment is increased, service levels typically will:

A department manager executes threat modeling at the beginning of a project and throughout its lifecycle.

What type of threat modeling is being performed?

A security consultant is working with an organization to help evaluate a proposal received from a new managed security service provider. There are questions about the confidentiality and effectiveness of the provider's system over a period of time.

Which of the following System And Organization Controls (SOC) report types should the consultant request from the provider?

After a recent cybersecurity incident, a manufacturing organization is interested in further hardening its Identity and Access Management (IAM) solution.
Knowing that the organization limits the use of personal devices in the facility, which could BEST be implemented to enhance the manufacturing organization's IAM solution?

After a recent threat modeling workshop, the organization has requested that the Chief Information Security Officer (CISO) implement zero trust (ZT) policies.

What was the MOST likely threat identified in the workshop?

An organization is running a cloud-based application to process the information obtained at point-of-sale devices.

Which guideline should be applied to the application?

Which of the following does a federated Identity Provider (IDP) need in order to grant access to identity information?

In Company XYZ, transaction-costing capability has been Integrated into the shop floor reporting system. A batch of 20 units was started in production. At the fourth operation, 20 units are reported as complete. At the fifth operation, 25 units are reported as complete. When all operations are complete, 20 units are checked into the stockroom.
If the error at the fifth operation is undetected, which of the following conditions will be true?

Which of the common vulnerabilities below can be mitigated by using indexes rather than actual portions of file names?

What can affect the trend, seasonality, or randomness of the actual demand?

An infrastructure team is setting up a wireless network for employees at a new location of the organization that is located near a very busy city transport huB:

Which should be the MOST important antenna consideration with regard to securing the wireless network for the infrastructure team?

Which of the following tools is used to evaluate the impact that a production plan has on capacity?

Which of the physiological biometric scanning methods is considered the MOST invasive?

When a small number of items often dominate the results achieved in any situation, this is called:

An agency has the requirement to establish a direct data connection with another organization for the purpose of exchanging data between the agency and organization systems. There is a requirement for a formal agreement between the agency and organization.

Which source of standards can the system owners use to define the roles and responsibilities along with details for the technical and security requirements?