Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 75)

Question 366

Which of the following metrics BEST demonstrates the effectiveness of an organization's security awareness strategy?

A.Percentage of end user computers and devices infected with malware

B.Number of security incidents reported to the help desk

C.Trends in mean time to resolution of security incidents

D.Pass rate of knowledge assessments completed after end user security training

Question 367

A risk assessment study carried out by an organization noted that there is no segmentation of the local area network (LAN). Network segmentation would reduce the potential impact of which of the following?

A.Denial of service (DoS) attacks

B.Traffic sniffing

C.Virus infections

D.IP address spoofing

Question 368

Which of the following is the MOST essential task for a chief information security officer (CISO) to perform?

A.Update platform-level security settings

B.Conduct disaster recovery test exercises

C.Approve access to critical financial systems

D.Develop an information security strategy paper

Question 369

Which of the following change management procedures is MOST likely to cause concern to the information security manager?

A.Fallback processes are tested the weekend before changes are made.

B.The development manager migrates programs into production.

C.A manual rather than an automated process is used to compare program versions.

D.Users are not notified of scheduled system changes.

Question 370

Most security vulnerabilities in software exit because:

A.software is developed without adherence to standards.

B.security is not properly designed.

C.security features are not tested adequately.

D.software has undocumented features.

Other Version: 1113ISACA.CISM.v2025-02-21.q785; 659ISACA.CISM.v2024-12-21.q371; 12811ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 102Genesys.GCX-GCD.v2025-09-13.q25; 102Huawei.H12-725_V4.0.v2025-09-13.q21; 111Oracle.1z0-1196-25.v2025-09-12.q18; 110NetworkAppliance.NS0-162.v2025-09-12.q86; 193OCEG.GRCP.v2025-09-11.q211; 111HP.HPE0-V27.v2025-09-11.q78; 126Oracle.1Z0-1057-23.v2025-09-10.q47; 169Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 141SAP.C-S4EWM-2023.v2025-09-08.q83; 205TheSecOpsGroup.CNSP.v2025-09-08.q20

Question 366

Question 367

Question 368

Question 369

Question 370

Download PDF File