Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 40)

Question 191

When contracting with an outsourcer to provide security administration, the MOST important contractual element is the:

A.right-to-terminate clause.

B.limitations of liability.

C.service level agreement (SLA).

D.financial penalties clause.

Question 192

Which of the following is the PRIMARY responsibility of the information security steering committee?

A.Developing security policies aligned with the corporate and IT strategies

B.Reviewing business cases where benefits have not been realized

C.Developing and presenting business cases for security initiatives

D.Identifying risks associated with new security initiatives

Question 193

Which of the following is MOST important for an information security manager to communicate to senior management regarding the security program?

A.Potential risks and exposures

B.Impact analysis results

C.Security architecture changes

D.User roles and responsibilities

Question 194

An emergency change was made to an IT system as a result of a failure. Which of the following should be of GREATEST concern to the organizations information security manager?

A.The operations team implemented the change without regression testing,

B.Documentation of the change was made after implementation.

C.The change did not include a proper assessment of risk.

D.The information security manager did not review the change prior to implementation.

Question 195

Which of the following is MOST important to help ensure an intrusion prevention system (IPS) can view all traffic in a demilitarized zone (DMZ)?

A.All Internal traffic is routed to the IPS.

B.The IPS is placed outside of the firewall.

C.Connected devices can contact the IPS.

D.Traffic is decrypted before processing by the IPS.

Other Version: 1081ISACA.CISM.v2025-02-21.q785; 642ISACA.CISM.v2024-12-21.q371; 12781ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 106OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 172TheSecOpsGroup.CNSP.v2025-09-08.q20; 240CFAInstitute.ESG-Investing.v2025-09-08.q173; 235PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 159Salesforce.Data-Architect.v2025-09-05.q216; 153Adobe.AD0-E605.v2025-09-05.q50

Question 191

Question 192

Question 193

Question 194

Question 195

Download PDF File