Free Access ISACA.CISM.v2022-03-24.q890 Practice Test (Page 99)

Question 486

Which of the following is an inherent weakness of signature-based intrusion detection systems?

A.A higher number of false positives

B.New attack methods will be missed

C.Long duration probing will be missed

D.Attack profiles can be easily spoofed

Question 487

Which of the following would be the BEST way for a company to reduce the risk of data loss resulting from employee-owned devices accessing the corporate email system?

A.Require employees to install a reputable mobile anti-virus solution on their personal devices.

B.Use a mobile device management (MDM) solution to isolate the local corporate email storage.

C.Link the bring-your-own-device (BYOD) policy to the existing staff disciplinary policy.

D.Require employees to undergo training before permitting access to the corporate email service

Question 488

What is the PRIMARY role of the information security program?

A.To develop and enforce a set of security policies aligned with the business

B.To educate stakeholders regarding information security requirements

C.To perform periodic risk assessments and business impact analyses (BIAs)

D.To provide guidance in managing organizational security risk

Question 489

Which of the following would BEST help to ensure an organization's security program is aligned with business objectives?

A.Security policies are reviewed and approved by the chief information officer.

B.The security strategy is reviewed and approved by the organization's executive committee.

C.The organization's board of directors includes a dedicated information security specialist.

D.Project managers receive annual information security awareness training.

Question 490

An IT department has given a vendor remote access to the internal network for troubleshooting network performance problems. After discovering the remote activity during a firewall log review, which of the following is the FIRST course of action for an information security manager?

A.Review the related service level agreement (SLA).

B.Determine the level of access granted

C.Declare a security incident.

D.Revoke the access.

Other Version: 1113ISACA.CISM.v2025-02-21.q785; 659ISACA.CISM.v2024-12-21.q371; 12811ISACA.CISM.v2022-06-26.q752; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 111Oracle.1z0-1196-25.v2025-09-12.q18; 110NetworkAppliance.NS0-162.v2025-09-12.q86; 151OCEG.GRCP.v2025-09-11.q211; 110HP.HPE0-V27.v2025-09-11.q78; 126Oracle.1Z0-1057-23.v2025-09-10.q47; 169Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 140SAP.C-S4EWM-2023.v2025-09-08.q83; 186TheSecOpsGroup.CNSP.v2025-09-08.q20; 283CFAInstitute.ESG-Investing.v2025-09-08.q173; 279PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 486

Question 487

Question 488

Question 489

Question 490

Download PDF File