Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 125)

Question 616

Which of the following is MOST helpful in securing funding for a commercial vulnerability assessment tool?

A.Explaining the business value of vulnerability remediation

B.Developing security metrics linked to business objectives

C.Identifying applicable legal and regulatory requirements

D.Presenting a vulnerability scan report for current business systems

Question 617

Which of the following external entities would provide the BEST guideance to an organization facing advanced attacks?

A.Open-source reconnaissance

B.Disaster recovery consultants widely endorsed in industry forums

C.Recognised threat intelligence communities

D.Incident response experts from highly regarded peer organizations

Question 618

Which of the following is the MOST relevant risk factor to an organization when employees use social media?

A.Social media can be accessed from multiple locations.

B.Social media offers a platform that can host cyber-attacks.

C.Social media increases the velocity of risk and the threat capacity.

D.Social media can be used to gather intelligence for attacks.

Question 619

A message* that has been encrypted by the sender's private key and again by the receiver's public key achieves:

A.authentication and authorization.

B.confidentiality and integrity.

C.confidentiality and nonrepudiation.

D.authentication and nonrepudiation.

Question 620

An information security manager is advised by contacts in law enforcement that there is evidence that his/ her company is being targeted by a skilled gang of hackers known to use a variety of techniques, including social engineering and network penetration. The FIRST step that the security manager should take is to:

A.perform a comprehensive assessment of the organization's exposure to the hacker's techniques.

B.initiate awareness training to counter social engineering.

C.immediately advise senior management of the elevated risk.

D.increase monitoring activities to provide early detection of intrusion.

Other Version: 1054ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 15499ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 119Oracle.1Z0-1057-23.v2025-09-10.q47; 153Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 166TheSecOpsGroup.CNSP.v2025-09-08.q20; 229CFAInstitute.ESG-Investing.v2025-09-08.q173; 176PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 152Salesforce.Data-Architect.v2025-09-05.q216; 148Adobe.AD0-E605.v2025-09-05.q50

Question 616

Question 617

Question 618

Question 619

Question 620

Download PDF File