Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 33)

Question 156

Which of the following is the MOST important item to include when developing web hosting agreements with third-party providers?

A.Termination conditions

B.Liability limits

C.Service levels

D.Privacy restrictions

Question 157

The likelihood of a successful attack is a function of:

A.value and desirability to the intruder

B.opportunity and asset value

C.incentive and capability of the intruder

D.threat and vulnerability levels

Question 158

Which of the following is the MOST important consideration when establishing an information security governance framework?

A.Security steering committee meetings are held at least monthly.

B.Members of the security steering committee are trained in information security.

C.Business unit management acceptance is obtained.

D.Executive management support is obtained.

Question 159

Organization A offers e-commerce services and uses secure transport protocol to protect Internet communication. To confirm communication with Organization A, which of the following would be the BEST for a client to verify?

A.The certificate of the e-commerce server

B.The browser's indication of SSL use

C.The IP address of the e-commerce server

D.The URL of the e-commerce server

Question 160

During the establishment of a service level agreement (SLA) with a cloud service provider, it is MOST important for the information security manager to:

A.ensure security requirements are contractually enforceable.

B.update the security policy to reflect the provider's terms of service.

C.understand the cloud storage architecture in use to determine security risk.

D.set up proper communication paths with the provider.

Other Version: 1064ISACA.CISM.v2025-02-21.q785; 620ISACA.CISM.v2024-12-21.q371; 15508ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 105HP.HPE0-V27.v2025-09-11.q78; 120Oracle.1Z0-1057-23.v2025-09-10.q47; 156Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 171TheSecOpsGroup.CNSP.v2025-09-08.q20; 237CFAInstitute.ESG-Investing.v2025-09-08.q173; 220PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 155Salesforce.Data-Architect.v2025-09-05.q216; 149Adobe.AD0-E605.v2025-09-05.q50

Question 156

Question 157

Question 158

Question 159

Question 160

Download PDF File