Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 149)

Question 736

Which of the following is the MOST effective way for senior management to support the integration of information security governance into corporate governance?

A.Develop the information security strategy based on the enterprise strategy

B.Appoint a business manager as head of information security

C.Establish a storing committee with representation from across the organization.

D.Promote organization-wide information security awareness campaigns.

Question 737

Nonrepudiation can BEST be assured by using:

A.delivery path tracing.

B.reverse lookup translation.

C.out-of-hand channels.

D.digital signatures.

Question 738

Which of the following trends BEST indicates that the maturity level of an information security program is improving?

A.A decrease in residual risk

B.A decrease in the number of security incidents

C.An increase in overall security funding

D.An increase in control self-assessments (CSAs) performed

Question 739

Which of the following BEST describes a buffer overflow?

A.A type of covert channel that captures data.

B.Malicious code designed to interfere with normal operations.

C.A function is carried out with more data than the function can handle.

D.A program contains a hidden and unintended function that presents a security risk.

Question 740

Which of the following is the MOST important reason to consider the role of the IT service desk when developing incident handling procedures?

A.The service desk provides information to prioritize systems recovery based or> user demand

B.Service desk personnel have information on how to resolve common systems issues

C.The service desk provides a source for the identification of security incidents.

D.Untrained service desk personnel may be a cause of security incidents.

Other Version: 1064ISACA.CISM.v2025-02-21.q785; 620ISACA.CISM.v2024-12-21.q371; 12765ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 106OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 121Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 171TheSecOpsGroup.CNSP.v2025-09-08.q20; 238CFAInstitute.ESG-Investing.v2025-09-08.q173; 225PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 155Salesforce.Data-Architect.v2025-09-05.q216; 149Adobe.AD0-E605.v2025-09-05.q50

Question 736

Question 737

Question 738

Question 739

Question 740

Download PDF File