Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 138)

Question 681

When security policies are strictly enforced, the initial impact is that:

A.they may have to be modified more frequently.

B.they will be less subject to challenge.

C.the total cost of security is increased.

D.the need for compliance reviews is decreased.

Question 682

In assessing the degree to which an organization may be affected by new privacy legislation, information security management should FIRST:

A.develop an operational plan for achieving compliance with the legislation.

B.identify systems and processes that contain privacy components.

C.restrict the collection of personal information until compliant.

D.identify privacy legislation in other countries that may contain similar requirements.

Question 683

Which of the following will BEST enable an effective information asset classification process?

A.Analyzing audit findings

B.Assigning ownership

C.Including security requirements in the classification process

D.Reviewing the recovery time objective (RTO) requirements of the asset

Question 684

When developing a new system, detailed information security functionality should FIRST be addressed:

A.as part of prototyping.

B.during the system design phase.

C.when system requirements are defined.

D.as part of application development.

Question 685

When a newly installed system for synchronizing passwords across multiple systems and platforms abnormally terminates without warning, which of the following should automatically occur FIRST?

A.The firewall should block all inbound traffic during the outage

B.All systems should block new logins until the problem is corrected

C.Access control should fall back to no synchronized mode

D.System logs should record all user activity for later analysis

Other Version: 1032ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 15477ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 158PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 149Salesforce.Data-Architect.v2025-09-05.q216; 144Adobe.AD0-E605.v2025-09-05.q50

Question 681

Question 682

Question 683

Question 684

Question 685

Download PDF File