Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 21)

Which of the following is BEST determined by using technical metrics?

A.How well the security strategy is aligned with organizational objectives

B.Whether security resources are adequately allocated

C.How well security risk is being managed

D.Whether controls are operating effectively.

The PRIMARY reason for classifying assets is to:

A.inform senior management of the organization's risk posture.

B.balance asset value and protection measures.

C.identify low-value assets with insufficient controls.

D.establish clear lines of authority and ownership for the asset

An information security manager wishing to establish security baselines would:

A.include appropriate measurements in the system development life cycle.

B.implement the security baselines to establish information security best practices.

C.implement the security baselines to fulfill laws and applicable regulations in different jurisdictions.

D.leverage information security as a competitive advantage.

What should be an information security manager's FIRST step when developing a business case for a new intrusion detection system (IDS) solution?

A.Conduct a feasibility study.

B.Calculate the total cost of ownership (TCO).

C.Define the issues to be addressed.

D.Perform a cost-benefit analysis.

Which of the following statements indicates that a previously failing security program is becoming successful?

A.Management's attention and budget are now focused on risk reduction.

B.The number of threats has been reduced.

C.More employees and stakeholders are attending security awareness programs.

D.The number of vulnerability false positives is decreasing.

Other Version: 1035ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 15484ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 151Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 165TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 169PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 150Salesforce.Data-Architect.v2025-09-05.q216; 144Adobe.AD0-E605.v2025-09-05.q50

Download PDF File