Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 44)

Question 211

Which of the following is the GREATEST benefit of integrating information security program requirements into vendor management?

A.The ability to reduce risk in the supply chain

B.The ability to meet industry compliance requirements

C.The ability to define service level agreements (SLAs)

D.The ability to improve vendor performance

Question 212

A user reports a stolen personal mobile device that stores sensitive corporate data. Which of the following will BEST minimize the risk of data exposure?

A.Wipe the device remotely.

B.Remove user's access to corporate data.

C.Prevent the user from using personal mobile devices.

D.Report the incident to the police.

Question 213

For an organization that provides web-based services, which of the following security events would MOST likely initiate an incident response plan and be escalated to management?

A.Multiple failed login attempts on an employee's workstation

B.Suspicious network traffic originating from the demilitarized zone (DMZ)

C.Several port scans of the web server

D.Anti-malware alerts on several employees' workstations

Question 214

Which of the following is the BEST method to securely transfer a message?

A.Password-protected removable media

B.Facsimile transmission in a secured room

C.Using public key infrastructure (PKI) encryption

D.Steganography

Question 215

For an organization with a large and complex IT infrastructure, which of the following elements of a disaster recovery hot site service will require the closest monitoring?

A.Employee access

B.Audit rights

C.Systems configurations

D.Number of subscribers

Other Version: 1087ISACA.CISM.v2025-02-21.q785; 650ISACA.CISM.v2024-12-21.q371; 15531ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 103Oracle.1z0-1196-25.v2025-09-12.q18; 102NetworkAppliance.NS0-162.v2025-09-12.q86; 144OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 180TheSecOpsGroup.CNSP.v2025-09-08.q20; 253CFAInstitute.ESG-Investing.v2025-09-08.q173; 238PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 211

Question 212

Question 213

Question 214

Question 215

Download PDF File