Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 15)

Which of the following poses the GREATEST risk to the operational effectiveness of an incident response team?

A.The lack of forensic investigation skills

B.The lack of delegated authority

C.The lack of automated communication channels

D.The lack of a security information and event management (SIEM) system

Which of (lie following would be the MOST relevant factor when defining the information classification policy?

A.Quantity of information

B.Available IT infrastructure

C.Benchmarking

D.Requirements of data owners

Which of the following is the BEST indication that the information secunty strategy is delivering business value?

A.Key risk indicators (KRIs) are regularly reviewed.

B.The information security team analyzes results from end user surveys.

C.Stakeholders regularly seek feedback from the information security team

D.There has been a significant reduction in the number of reported incidents.

Which of the following is MOST helpful in protecting against hacking attempts on the production network?

A.Decentralized honeypot networks

B.Intrusion prevention systems

C.Security information and event management (SIEM) tools

D.Network penetration testing

Which of the following is the BEST approach for an information security manager to effectively manage third-party risk?

A.Ensure vendor governance controls are in place.

B.Ensure controls are implemented to address changes in risk.

C.Ensure senior management has approved the vendor relationship.

D.Ensure risk management efforts are commensurate with risk exposure.

Other Version: 1032ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 15477ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 158PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 149Salesforce.Data-Architect.v2025-09-05.q216; 144Adobe.AD0-E605.v2025-09-05.q50

Download PDF File