Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 25)

Question 116

What will have the HIGHEST impact on standard information security governance models?

A.Number of employees

B.Distance between physical locations

C.Complexity of organizational structure

D.Organizational budget

Question 117

When the inherent risk of a business activity is lower than the acceptable risk level, the BEST course of action would be to:

A.monitor for business changes.

B.report compliance to management

C.implement controls to mitigate the risk.

D.review the residual risk level

Question 118

An IT department is evaluating a new cloud backup service to support the human resources (HR) department. Which of the following is the information security manager's MOST important action prior to contract execution?

A.Complete a compliance risk assessment.

B.Review the risk with HR executives.

C.Ensure HR data is encrypted prior to sending it to the cloud vendor.

D.Evaluate the cloud vendor's information security program.

Question 119

The BEST way to establish a security baseline is by documenting:

A.a framework of operational standards

B.the desired range of security settings

C.the organization's preferred security level.

D.a standard of acceptable settings

Question 120

Which of the following would BEST help to ensure an organization's information security strategy is aligned with business objectives?

A.Implementing an automated solution for monitoring information security processes

B.Establishing a change control process for continued updating of security policies

C.Establishing metrics to measure the effectiveness of the information security program

D.Requesting senior management to periodically review security incidents

Other Version: 1050ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 12747ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 153Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 166TheSecOpsGroup.CNSP.v2025-09-08.q20; 229CFAInstitute.ESG-Investing.v2025-09-08.q173; 176PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 152Salesforce.Data-Architect.v2025-09-05.q216; 148Adobe.AD0-E605.v2025-09-05.q50

Question 116

Question 117

Question 118

Question 119

Question 120

Download PDF File