Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 42)

Which of the following is the BEST reason to perform a business impact analysis (BIA)?

A.To help determine the current state of risk

B.To budget appropriately for needed controls

C.To satisfy regulatory requirements

D.To analyze the effect on the business

Which of the following are the MOST important criteria when selecting virus protection software?

A.Product market share and annualized cost

B.Ability to interface with intrusion detection system (IDS) software and firewalls

C.Alert notifications and impact assessments for new viruses

D.Ease of maintenance and frequency of updates

Which of the following is the MOST appropriate course of action when the risk occurrence rate is low but the impact is high?

A.Risk transfer

B.Risk acceptance

C.Risk mitigation

D.Risk avoidance

The MOST effective control to detect fraud inside an organization's network is to:

A.implement C (IDS).

B.review access logs.

C.apply two-factor authentication

D.segregate duties

Data owners are PRIMARILY responsible for establishing risk mitigation methods to address which of the following areas?

A.Platform security

B.Entitlement changes

C.Intrusion detection

D.Antivirus controls

Other Version: 1078ISACA.CISM.v2025-02-21.q785; 642ISACA.CISM.v2024-12-21.q371; 15522ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 106OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 172TheSecOpsGroup.CNSP.v2025-09-08.q20; 240CFAInstitute.ESG-Investing.v2025-09-08.q173; 235PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 159Salesforce.Data-Architect.v2025-09-05.q216; 153Adobe.AD0-E605.v2025-09-05.q50

Download PDF File