Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 12)

Question 51

Which of the following provides the BEST justification for an information security investment when creating a business case

A.The investment reduces the protected asset s inherent risk below the asset s residual risk

B.The investment can be managed using the organisation's established system development life cycle.

C.The annualized loss expectancy (ALE) is greater than the annual cost of the investment.

D.Key risk indicators (KRIs) are available to measure the effectiveness and efficiency of the investment

Question 52

Which of the following is MOST relevant for an information security manager to communicate to business units?

A.Threat assessments

B.Vulnerability assessments

C.Risk ownership

D.Business impact analysis (BIA)

Question 53

Which of the following should be in place before a black box penetration test begins?

A.IT management approval

B.Proper communication and awareness training

C.A clearly stated definition of scope

D.An incident response plan

Question 54

An organization is considering moving to a cloud service provider for the storage of sensitive dat a. Which of the following should be considered FIRST?

A.Results of the cloud provider's control report

B.A destruction-of-data clause in the contract

C.Requirements for data encryption

D.Right to terminate clauses in the contract

Question 55

Which of the following is MOST important when selecting a third-party security operations center?

A.Independent controls assessment

B.Incident response plans

C.Indemnity clauses

D.Business continuity plans

Other Version: 1025ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 12720ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 103OCEG.GRCP.v2025-09-11.q211; 102HP.HPE0-V27.v2025-09-11.q78; 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 222CFAInstitute.ESG-Investing.v2025-09-08.q173; 157PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 147Salesforce.Data-Architect.v2025-09-05.q216; 141Adobe.AD0-E605.v2025-09-05.q50

Question 51

Question 52

Question 53

Question 54

Question 55

Download PDF File