Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 132)

Question 651

Which of the following would BEST ensure the success of information security governance within an organization?

A.Steering committees approve security projects

B.Security policy training provided to all managers

C.Security training available to all employees on the intranet

D.Steering committees enforce compliance with laws and regulations

Question 652

A new program has been implemented to standardize security configurations across a multinational organization Following implementation, the configuration standards should:

A.not deviate from industry best practice baselines.

B.be changed for different subsets of the systems to minimize impact,

C.remain unchanged to avoid variations across the organization

D.be updated to address emerging threats and vulnerabilities.

Question 653

Which of the following provides the BEST preparation for handling the breach of a corporate web site?

A.Incident response testing

B.Web server penetration testing

C.Review of cyber liability insurance coverage

D.Documented data recovery procedures

Question 654

Which of the following situations would be the MOST concern to a security manager?

A.Audit logs are not enabled on a production server

B.The logon ID for a terminated systems analyst still exists on the system

C.The help desk has received numerous results of users receiving phishing e-mails

D.A Trojan was found to be installed on a system administrator's laptop

Question 655

Key systems necessary for branch operations reside at corporate headquarters. Branch A is negotiating with a third party to provide disaster recovery facilities. Which of the following contract terms would be the MOST significant concern?

A.The hot site for the branch may have to be shared.

B.The right to audit the hot site Is not provided In the contract.

C.Connectivity Is not provided from the hot site to corporate headquarters.

D.Penalty clauses for nonperformance are not included in the contract

Other Version: 1094ISACA.CISM.v2025-02-21.q785; 659ISACA.CISM.v2024-12-21.q371; 12791ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105Oracle.1z0-1196-25.v2025-09-12.q18; 104NetworkAppliance.NS0-162.v2025-09-12.q86; 144OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 180TheSecOpsGroup.CNSP.v2025-09-08.q20; 257CFAInstitute.ESG-Investing.v2025-09-08.q173; 241PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 651

Question 652

Question 653

Question 654

Question 655

Download PDF File