Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 151)

Question 746

An information security manager has been informed of a new vulnerability in an online banking application, and a patch to resolve this issue is expected to be released in the next 72 hours. The information security manager s MOST important course of action is to:

A.assess the risk and advise senior management

B.perform a business impact analysis (BIA).

C.run the application system m offline mode.

D.identify and implement mitigating controls.

Question 747

Security technologies should be selected PRIMARILY on the basis of their:

A.ability to mitigate business risks.

B.evaluations in trade publications.

C.use of new and emerging technologies.

D.benefits in comparison to their costs.

Question 748

Management decisions concerning information security investments will be MOST effective when they are based on:

A.an annual loss expectancy (ALE) determined from the history of security events.

B.a process for identifying and analyzing threats and vulnerabilities

C.the reporting of consistent and periodic assessments of risks.

D.the formalized acceptance of risk analysis by management.

Question 749

The BEST way to encourage good security practices is to:

A.schedule periodic compliance audits.

B.discipline those who fail to comply with the security policy.

C.recognize appropriate security behavior by individuals.

D.publish the information security policy.

Question 750

The PRIMARY purpose for continuous monitoring of security controls is to ensure:

A.system availability.

B.control gaps are minimized.

C.effectiveness of controls.

D.alignment with compliance requirements.

Other Version: 1025ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 15469ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 102OCEG.GRCP.v2025-09-11.q211; 102HP.HPE0-V27.v2025-09-11.q78; 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 222CFAInstitute.ESG-Investing.v2025-09-08.q173; 157PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 147Salesforce.Data-Architect.v2025-09-05.q216; 141Adobe.AD0-E605.v2025-09-05.q50

Question 746

Question 747

Question 748

Question 749

Question 750

Download PDF File