Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 74)

Question 361

The PRIMARY goal of a security infrastructure design is the:

A.reduction of security incidents.

B.protection of corporate assets.

C.elimination of risk exposures.

D.optimization of IT resources.

Question 362

Security awareness training should be provided to new employees:

A.on an as-needed basis.

B.during system user training.

C.before they have access to data.

D.along with department staff.

Question 363

Which of the following would be MOST useful in a report to senior management for evaluating changes in the organization's information security risk position?

A.Management action plan

B.Trend analysis

C.Industry benchmarks

D.Risk register

Question 364

Which of the following would provide the MOST useful input when creating an information security program?

A.Business case

B.Key risk indicators (KRls)

C.Information security budget

D.Information security strategy

Question 365

The MOST appropriate owner of customer data stored in a central database, used only by an organization's sales department, would be the:

A.sales department.

B.database administrator.

C.chief information officer (CIO).

D.head of the sales department.

Other Version: 1113ISACA.CISM.v2025-02-21.q785; 659ISACA.CISM.v2024-12-21.q371; 12811ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 102Genesys.GCX-GCD.v2025-09-13.q25; 102Huawei.H12-725_V4.0.v2025-09-13.q21; 111Oracle.1z0-1196-25.v2025-09-12.q18; 110NetworkAppliance.NS0-162.v2025-09-12.q86; 193OCEG.GRCP.v2025-09-11.q211; 111HP.HPE0-V27.v2025-09-11.q78; 126Oracle.1Z0-1057-23.v2025-09-10.q47; 169Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 142SAP.C-S4EWM-2023.v2025-09-08.q83; 205TheSecOpsGroup.CNSP.v2025-09-08.q20

Question 361

Question 362

Question 363

Question 364

Question 365

Download PDF File