Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 19)

Question 86

Change management procedures to ensure that disaster recovery/business continuity plans are kept up-to- date can be BEST achieved through which of the following?

A.Reconciliation of the annual systems inventory to the disaster recovery, business continuity plans

B.Periodic audits of the disaster recovery/business continuity plans

C.Comprehensive walk-through testing

D.Inclusion as a required step in the system life cycle process

Question 87

A team developing an interface to a key financial system has identified a security flaw in one of the libraries. Remediating the flaw would require major system redesign. What should the information security manager do NEXT?

A.Instruct the development team to remediate the flaw.

B.Confirm the impact with the business owner.

C.Conduct a comprehensive source code review.

D.Hire a consultant to design proper remediation controls.

Question 88

After a server has been attacked, which of the following is the BEST course of action?

A.Conduct a security audit

B.Review vulnerability assessment

C.Isolate the system

D.Initiate incident response

Question 89

Risk assessment is MOST effective when performed:

A.at the beginning of security program development.

B.on a continuous basis.

C.while developing the business case for the security program.

D.during the business change process.

Question 90

Which of the following is the MOST important objective of testing a security incident response plan?

A.Confirm that systems are recovered in the proper order

B.Verify the response assumptions are valid

C.Ensure the thoroughness of the response plan

D.Validate the business impact analysis

Other Version: 1038ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 15487ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 151Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 165TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 173PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 151Salesforce.Data-Architect.v2025-09-05.q216; 146Adobe.AD0-E605.v2025-09-05.q50

Question 86

Question 87

Question 88

Question 89

Question 90

Download PDF File