Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 113)

Question 556

The criticality of an information asset is derived from its:

A.threat level

B.business value

C.replacement cost

D.frequency of use.

Question 557

An information security manager needs to ensure security testing is conducted on a new system. Which of the following would provide the HIGHEST level of assurance?

A.The internal audit team is enlisted to run a vulnerability assessment against the system.

B.An independent party is directly engaged to conduct testing.

C.The vendor provides the results of a penetration test and code review.

D.The security team conducts a self-assessment against a recognized industry framework.

Question 558

An information security manager has researched several options for handling ongoing security concerns and will be presenting these solutions to business managers. Which of the following with BEST enable business managers to make an informed decision?

A.Risk analysis

B.Gap analysis

C.Business impact analysts (BIA)

D.Cost-benefit analysis

Question 559

Which of the following are likely to be updated MOST frequently?

A.Procedures for hardening database servers

B.Standards for password length and complexity

C.Policies addressing information security governance

D.Standards for document retention and destruction

Question 560

When personal information is transmitted across networks, there MUST be adequate controls over:

A.change management.

B.privacy protection.

C.consent to data transfer.

D.encryption devices.

Other Version: 1073ISACA.CISM.v2025-02-21.q785; 630ISACA.CISM.v2024-12-21.q371; 15518ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 106OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 172TheSecOpsGroup.CNSP.v2025-09-08.q20; 239CFAInstitute.ESG-Investing.v2025-09-08.q173; 225PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 157Salesforce.Data-Architect.v2025-09-05.q216; 152Adobe.AD0-E605.v2025-09-05.q50

Question 556

Question 557

Question 558

Question 559

Question 560

Download PDF File