Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 173)

Question 856

Which of the following information security metrics would be MOST meaningful to executive management in assessing the effectiveness of the information security strategy?

A.Number of information security policy violations reported quarterly

B.Percentage of systems that are patched within the required time period

C.Monthly cost of maintaining information security controls

D.Nonthly cost of interruptions in core processes due to security incidents

Question 857

An organization implemented a mandatory information security awareness training program a year ago. What is the BEST way to determine its effectiveness?

A.Analyze findings from previous audit reports

B.Analyze results from training completion reports

C.Analyze results of a social engineering test

D.Analyze responses from an employee survey of training satisfaction

Question 858

An intrusion detection system should be placed:

A.outside the firewall.

B.on the firewall server.

C.on a screened subnet.

D.on the external router.

Question 859

The effectiveness of virus detection software is MOST dependent on which of the following?

A.Packet filtering

B.Intrusion detection

C.Software upgrades

D.D. Definition tables

Question 860

Which of the following is the BEST approach to identify noncompliance issues with legal, regulatory, and contractual requirements?

A.Gap analysis

B.Vulnerability assessment

C.Risk assessment

D.Business impact analysis (B1A)

Other Version: 1012ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 12706ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 101OCEG.GRCP.v2025-09-11.q211; 101HP.HPE0-V27.v2025-09-11.q78; 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 222CFAInstitute.ESG-Investing.v2025-09-08.q173; 157PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 147Salesforce.Data-Architect.v2025-09-05.q216; 141Adobe.AD0-E605.v2025-09-05.q50

Question 856

Question 857

Question 858

Question 859

Question 860

Download PDF File