Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 26)

BEST way to isolate corporate data stored on employee-owned mobile devices would be to implement:

A.a sandbox environment

B.two-factor authentication

C.device encryption,

D.a strong password policy

What is the BEST method for mitigating against network denial of service (DoS) attacks?

A.Ensure all servers are up-to-date on OS patches

B.Employ packet filtering to drop suspect packets

C.Implement network address translation to make internal addresses nonroutable

D.Implement load balancing for Internet facing devices

Which of the following is the BEST method to determine whether an information security program meets an organization's business objectives?

A.Implement performance measures.

B.Review against international security standards.

C.Perform a business impact analysis (BIA).

D.Conduct an annual enterprise-wide security evaluation.

Which of the following would BEST assist an information security manager in gaining strategic support from executive management?

A.Rating of the organization s security, based on international standards

B.Annual report of security incidents within the organization

C.Research on trends in global information security breaches

D.Risk analysis specific to the organization

The MAIN reason why asset classification is important to a successful information security program is because classification determines:

A.the priority and extent of risk mitigation efforts.

B.the amount of insurance needed in case of loss.

C.the appropriate level of protection to the asset.

D.how protection levels compare to peer organizations.

Other Version: 1050ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 12747ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 153Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 166TheSecOpsGroup.CNSP.v2025-09-08.q20; 229CFAInstitute.ESG-Investing.v2025-09-08.q173; 176PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 152Salesforce.Data-Architect.v2025-09-05.q216; 148Adobe.AD0-E605.v2025-09-05.q50

Download PDF File