Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 39)

Question 186

When designing security controls, it is MOST important to:

A.apply a risk-based approach.

B.apply controls to confidential information.

C.focus on preventive controls.

D.evaluate the costs associated with the controls.

Question 187

Which of the following is the MOST important reason to consider the role of the IT service desk when developing incident handling procedures?

A.Service desk personnel have information on how to resolve common systems issues.

B.The service desk provides a source for the identification of security incidents.

C.The service desk provides information to prioritize systems recovery based on user demand.

D.Untrained service desk personnel may be a cause of security incidents.

Question 188

An organization that outsourced its payroll processing performed an independent assessment of the security controls of the third party, per policy requirements. Which of the following is the MOST useful requirement to include in the contract?

A.Right to audit

B.Nondisclosure agreement

C.Proper firewall implementation

D.Dedicated security manager for monitoring compliance

Question 189

Which of the following would the BEST demonstrate the added value of an information security program?

A.A gap analysis

B.Security baselines

C.A SWOT analysis

D.A balanced scorecard

Question 190

Which of the following is MOST important for an information security manager to communicate to senior management regarding the security program?

A.User roles and responsibilities

B.Security architecture changes

C.Impact analysis results

D.Potential risks and exposures

Other Version: 1081ISACA.CISM.v2025-02-21.q785; 642ISACA.CISM.v2024-12-21.q371; 12782ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 106OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 172TheSecOpsGroup.CNSP.v2025-09-08.q20; 240CFAInstitute.ESG-Investing.v2025-09-08.q173; 235PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 159Salesforce.Data-Architect.v2025-09-05.q216; 153Adobe.AD0-E605.v2025-09-05.q50

Question 186

Question 187

Question 188

Question 189

Question 190

Download PDF File