Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 51)

Question 246

An organization establishes an internal document collaboration site. To ensure data confidently of each project group, it is MOST important to:

A.Prohibit remote access to the site

B.Enforce document life cycle management

C.Periodically recertify access rights.

D.Conduct vulnerability assessment

Question 247

What is the GREATEST risk when there is an excessive number of firewall rules?

A.One rule may override another rule in the chain and create a loophole

B.Performance degradation of the whole network

C.The firewall may not support the increasing number of rules due to limitations

D.The firewall may show abnormal behavior and may crash or automatically shut down

Question 248

When application-level security controlled by business process owners is found to be poorly managed, which of the following could BEST improve current practices?

A.Centralizing security management

B.Implementing sanctions for noncompliance

C.Policy enforcement by IT management

D.Periodic compliance reviews

Question 249

An emergency change was made to an IT system as a result of a failure. Which of the following should be of GREATEST concern to the organization's information security manager?

A.The change did not include a proper assessment of risk.

B.The information security manager did not review the change prior to implementation.

C.Documentation of the change was made after implementation.

D.The operations team implemented the change without regression testing.

Question 250

What is the BEST way to ensure that contract programmers comply with organizational security policies?

A.Explicitly refer to contractors in the security standards

B.Have the contractors acknowledge in writing the security policies

C.Create penalties for noncompliance in the contracting agreement

D.Perform periodic security reviews of the contractors

Other Version: 1107ISACA.CISM.v2025-02-21.q785; 659ISACA.CISM.v2024-12-21.q371; 12805ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 108Oracle.1z0-1196-25.v2025-09-12.q18; 109NetworkAppliance.NS0-162.v2025-09-12.q86; 149OCEG.GRCP.v2025-09-11.q211; 109HP.HPE0-V27.v2025-09-11.q78; 125Oracle.1Z0-1057-23.v2025-09-10.q47; 161Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 139SAP.C-S4EWM-2023.v2025-09-08.q83; 183TheSecOpsGroup.CNSP.v2025-09-08.q20; 267CFAInstitute.ESG-Investing.v2025-09-08.q173; 257PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 246

Question 247

Question 248

Question 249

Question 250

Download PDF File