Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 45)

Question 216

The recovery point objective (RPO) requires which of the following?

A.Disaster declaration

B.Before-image restoration

C.System restoration

D.After-image processing

Question 217

What is the BEST policy for securing data on mobile universal serial bus (USB) drives?

A.Authentication

B.Encryption

C.Prohibit employees from copying data to USB devices

D.Limit the use of USB devices

Question 218

A business unit uses an e-commerce application with a strong password policy. Many customers complain that they cannot remember their passwords because they are too long and complex. The business unit states it is imperative to improve the customer experience. The information security manager should FIRST:

A.recommend implementing two-factor authentication

B.evaluate the impact of the customer's experience on business revenue

C.research alternative secure methods of identity verification

D.change the password policy to improve the customer experience

Question 219

Which of the following would MOST likely require a business continuity plan to be invoked?

A.A distributed denial of service attack on an e-mail server

B.An unauthorized visitor discovered in the data center

C.An epidemic preventing staff from performing job functions

D.A hacker holding personally identifiable information hostage

Question 220

An organization recently rolled out a new procurement program that does not include any security requirements. Which of the following should the information security manager do FIRST?

A.Meet with the head of procurement to discuss aligning security with the organization's operational objectives.

B.Escalate the procurement program gaps to the compliance department in case of noncompliance issues.

C.Ask internal audit to conduct an assessment of the current state of third-party security controls.

D.Conduct security assessments of vendors based on value of annual spend with each vendor.

Other Version: 1087ISACA.CISM.v2025-02-21.q785; 650ISACA.CISM.v2024-12-21.q371; 15531ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 103Oracle.1z0-1196-25.v2025-09-12.q18; 102NetworkAppliance.NS0-162.v2025-09-12.q86; 144OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 180TheSecOpsGroup.CNSP.v2025-09-08.q20; 253CFAInstitute.ESG-Investing.v2025-09-08.q173; 238PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 216

Question 217

Question 218

Question 219

Question 220

Download PDF File