Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 112)

Question 551

The MOST important factors in determining the scope and timing for testing a business continuity plan are:

A.the importance of the functional to be tested and the cost of testing

B.the experience level of personnel and the function location

C.prior testing results and the degree of detail of the business continuity plan

D.manual processing capabilities and the test location

Question 552

An information security manager is developing a business case for an investment in an information security control. The FIRST step should be to:

A.demonstrate increased productivity of security staff

B.assess potential impact to the organization

C.gain audit buy-in for the security control

D.research vendor pricing to show cost efficiency

Question 553

When an organization and its IT-hosting service provider are establishing a contract with each other, it is MOST important that the contract includes:

A.recovery time objectives (RTOs).

B.each party s security responsibilities.

C.details of expected security metrics

D.penalties for noncompliance with security policy

Question 554

An external security audit has reported multiple instances of control noncompliance. Which of the following is MOST important for the information security manager to communicate to senior managements.

A.The impact of noncompliance on the organization's risk profile

B.An accountability risk to initiate remediation activities

C.A plan for mitigating the risk due to noncompliance

D.Control owner responses based on a root cause analysis

Question 555

Which of the following are the essential ingredients of a business impact analysis (B1A)?

A.Downtime tolerance, resources and criticality

B.Cost of business outages in a year as a factor of the security budget

C.Business continuity testing methodology being deployed

D.Structure of the crisis management team

Other Version: 1078ISACA.CISM.v2025-02-21.q785; 642ISACA.CISM.v2024-12-21.q371; 15522ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 106OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 172TheSecOpsGroup.CNSP.v2025-09-08.q20; 240CFAInstitute.ESG-Investing.v2025-09-08.q173; 235PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 159Salesforce.Data-Architect.v2025-09-05.q216; 153Adobe.AD0-E605.v2025-09-05.q50

Question 551

Question 552

Question 553

Question 554

Question 555

Download PDF File