Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 134)

Question 661

Which of (lie following would be the MOST relevant factor when defining the information classification policy?

A.Quantity of information

B.Available IT infrastructure

C.Benchmarking

D.Requirements of data owners

Question 662

What is the MOST important factor for determining prioritization of incident response?

A.Service level agreements (SLAs) pertaining to the impacted systems

B.The potential impact to the business

C.The time to restore the impacted systems

D.The availability of specialized technical staff

Question 663

To mitigate a situation where one of the programmers of an application requires access to production data, the information security manager could BEST recommend to.

A.create a separate account for the programmer as a power user.

B.log all of the programmers' activity for review by supervisor.

C.have the programmer sign a letter accepting full responsibility.

D.perform regular audits of the application.

Question 664

Which of the following is the BEST way to ensure the effectiveness of a role-based access scheme?

A.Implement a self-service password system.

B.Implement centralized event logging.

C.Review the number of unauthorized access attempts.

D.Review the number of exceptions granted.

Question 665

When developing an incident response plan, the information security manager should:

A.include response scenarios that have been approved previously by business management.

B.determine recovery time objectives (RTOs).

C.allow IT to decide which systems can be removed from the infrastructure.

D.require IT to invoke the business continuity plan.

Other Version: 1092ISACA.CISM.v2025-02-21.q785; 656ISACA.CISM.v2024-12-21.q371; 12791ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 104Oracle.1z0-1196-25.v2025-09-12.q18; 103NetworkAppliance.NS0-162.v2025-09-12.q86; 144OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 180TheSecOpsGroup.CNSP.v2025-09-08.q20; 254CFAInstitute.ESG-Investing.v2025-09-08.q173; 240PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 661

Question 662

Question 663

Question 664

Question 665

Download PDF File