Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 85)

Question 416

An organization has established information security policies, but the information security manager has noted a large number of exception requests. Which of the following is the MOST likely reason for this situation?

A.The organization is operating in a highly regulated industry.

B.The information security program is not adequately funded.

C.The information security policies lack alignment with corporate goals.

D.The information security policies are not communicated across the organization

Question 417

Which of the following is the MOST important influence to the continued success of an organization's information security strategy?

A.Security processes

B.Policy development

C.Information systems

D.Organizational culture

Question 418

Which of the following documents would be the BES T reference to determine whether access control mechanisms are appropriate for a critical application?

A.User security procedures

B.Business process flow

C.IT security policy

D.Regulatory requirements

Question 419

An information security manager has completed a risk assessment and has determined the residual risk.
Which of the following should be the NEXT step?

A.Conduct an evaluation of controls

B.Determine if the risk is within the risk appetite

C.Implement countermeasures to mitigate risk

D.Classify all identified risks

Question 420

Penetration testing is MOST appropriate when a:

A.new system is being designed.

B.new system is about to go live.

C.security incident has occurred.

D.security policy is being developed

Other Version: 1114ISACA.CISM.v2025-02-21.q785; 659ISACA.CISM.v2024-12-21.q371; 12811ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 104Genesys.GCX-GCD.v2025-09-13.q25; 105Huawei.H12-725_V4.0.v2025-09-13.q21; 111Oracle.1z0-1196-25.v2025-09-12.q18; 110NetworkAppliance.NS0-162.v2025-09-12.q86; 193OCEG.GRCP.v2025-09-11.q211; 112HP.HPE0-V27.v2025-09-11.q78; 127Oracle.1Z0-1057-23.v2025-09-10.q47; 169Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 146SAP.C-S4EWM-2023.v2025-09-08.q83; 208TheSecOpsGroup.CNSP.v2025-09-08.q20

Question 416

Question 417

Question 418

Question 419

Question 420

Download PDF File