Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 153)

Which of the following is MOST important for measuring the effectiveness of a security awareness program?

A.Reduced number of security violation reports

B.A quantitative evaluation to ensure user comprehension

C.Increased interest in focus groups on security issues

D.Increased number of security violation reports

Which of the following is the MOST significant benefit of effective change management?

A.Information security management is Involved with the change advisory board.

B.All provisioned modifications are approved by information security.

C.Release management is considered in the process.

D.Security implications are considered as a standard practice.

When an organization is using an automated tool to manage and house its business continuity plans, which of the following is the PRIMARY concern?

A.Ensuring accessibility should a disaster occur

B.Versioning control as plans are modified

C.Broken hyperlinks to resources stored elsewhere

D.Tracking changes in personnel and plan assets

Which of the following is the BEST indicator that security awareness training has been effective?

A.Employees sign to acknowledge the security policy

B.More incidents are being reported

C.A majority of employees have completed training

D.No incidents have been reported in three months

Which of the following is MOST important to consider when defining control objectives?

A.The organization's strategic objectives

B.The current level of residual risk

C.The organization's risk appetite

D.Control recommendations from a recent audit

Other Version: 1055ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 12756ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 119Oracle.1Z0-1057-23.v2025-09-10.q47; 153Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 167TheSecOpsGroup.CNSP.v2025-09-08.q20; 231CFAInstitute.ESG-Investing.v2025-09-08.q173; 199PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 154Salesforce.Data-Architect.v2025-09-05.q216; 148Adobe.AD0-E605.v2025-09-05.q50

Download PDF File