Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 30)

Question 141

Which of the following is the PRIMARY prerequisite to implementing data classification within an organization?

A.Defining job roles

B.Performing a risk assessment

C.Identifying data owners

D.Establishing data retention policies

Question 142

Which of the following will BEST protect confidential data when connecting large wireless networks to an existing wired-network infrastructure?

A.Mandatory access control (MAC) address filtering

B.Strong passwords

C.Virtual private network (VPN)

D.Firewall

Question 143

An organization recently implemented a data loss prevention (DLP) system. A senior business executive has complained that the system seriously impedes departmental effectiveness. What is the information security manager's BEST course of action?

A.Perform a risk assessment.

B.Review alternative controls.

C.Request risk acceptance.

D.Change the DLP system.

Question 144

Following a malicious security incident, an organization has decided to prosecute those responsible. Which of the following will BEST facilitate the forensic investigation?

A.Maintaining chain of custody

B.Determining the degree of loss

C.Identifying the affected environment

D.Performing a backup of affected systems

Question 145

An organization experienced a breach which was successfully contained and remediated. Based on industry regulations, the breach needs to be communicated externally. What should the information security manager do NEXT?

A.Refer to the incident response plan.

B.Send out a breach notification to all parties involved.

C.Contact the board of directors.

D.Invoke the corporate communications plan.

Other Version: 1054ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 15499ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 119Oracle.1Z0-1057-23.v2025-09-10.q47; 153Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 166TheSecOpsGroup.CNSP.v2025-09-08.q20; 229CFAInstitute.ESG-Investing.v2025-09-08.q173; 176PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 152Salesforce.Data-Architect.v2025-09-05.q216; 148Adobe.AD0-E605.v2025-09-05.q50

Question 141

Question 142

Question 143

Question 144

Question 145

Download PDF File