Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 27)

The BEST way to minimize errors in the response to an incident is to:

A.follow standard operating procedures.

B.reference system administration manuals.

C.analyze the situation during the incident.

D.implement vendor recommendations.

Data owners are normally responsible for which of the following?

A.Applying emergency changes to application data

B.Administering security over database records

C.Migrating application code changes to production

D.Determining the level of application security required

Previously accepted risk should be:

A.re-assessed periodically since the risk can be escalated to an unacceptable level due to revised conditions.

B.accepted permanently since management has already spent resources (time and labor) to conclude that the risk level is acceptable.

C.avoided next time since risk avoidance provides the best protection to the company.

D.removed from the risk log once it is accepted.

What is the MAIN reason for an organization to develop an incident response plan?

A.Trigger immediate recovery procedures.

B.Identify training requirements for the incident response team.

C.Prioritize treatment based on incident criticality.

D.Provide a process for notifying stakeholders of the incident.

Which of the following is the MOST effective way for an information security manager to protect the organization from misuse of social media?

A.Hire a social media manager to control content delivered via social media.

B.Scan social media platforms for company references

C.Restrict the use of social media on corporate networks and devices

D.Deliver regular social media awareness training to all employees.

Other Version: 1054ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 12754ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 119Oracle.1Z0-1057-23.v2025-09-10.q47; 153Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 166TheSecOpsGroup.CNSP.v2025-09-08.q20; 229CFAInstitute.ESG-Investing.v2025-09-08.q173; 176PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 152Salesforce.Data-Architect.v2025-09-05.q216; 148Adobe.AD0-E605.v2025-09-05.q50

Download PDF File