Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 137)

Which of the following processes can be used to remediate identified technical vulnerabilities?

A.Performing penetration testing

B.Conducting a risk assessment

C.Updating the business impact analysis (BIA)

D.Enforcing baseline configurations

All risk management activities are PRIMARILY designed to reduce impacts to:

A.a level defined by the security manager.

B.an acceptable level based on organizational risk tolerance.

C.a minimum level consistent with regulatory requirements.

D.the minimum level possible.

Which of the following could be detected by a network intrusion detection system (IDS)?

A.Undocumented open ports

B.Unauthorized file change

C.Internally generated attacks

D.Emailed virus attachments

When personal information is transmitted across networks, there MUST be adequate controls over:

A.change management.

B.privacy protection.

C.consent to data transfer.

D.encryption devices.

Which of the following is the GREATEST security threat when an organization allows remote access to a virtual private network (VPN)?

A.Client logins are subject to replay attack

B.Compromised VPN clients could impact the network

C.Attackers could compromise the VPN gateway

D.VPN traffic could be sniffed and captured

Other Version: 1096ISACA.CISM.v2026-06-18.q999; 10730ISACA.CISM.v2025-02-21.q785; 2536ISACA.CISM.v2024-12-21.q371; 18945ISACA.CISM.v2022-03-24.q890; 83ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 244APICS.CSCP.v2026-09-13.q612; 164ISACA.AAISM.v2026-09-13.q256; 141Adobe.AD0-E911.v2026-09-12.q35; 128Google.ADP.v2026-09-11.q22; 145AIChE.CCPSC.v2026-09-11.q41; 133Scrum.PSPO-III.v2026-09-10.q23; 229Scrum.PSPO-I.v2026-09-09.q157; 195ScaledAgile.SAFe-SPC.v2026-09-08.q108; 152Oracle.1Z0-1033-26.v2026-09-08.q43; 256Pegasystems.PEGACPSSA25V1.v2026-09-08.q144

Download PDF File