Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 56)

What is the BEST defense against a Structured Query Language (SQL) injection attack?

A.Regularly updated signature files

B.A properly configured firewall

C.An intrusion detection system

D.Strict controls on input fields

Which of the following BEST indicates that information security will be considered when new IT technologies are implemented across an organization?

A.The information security manager is on the IT architecture review board.

B.IT employee job descriptions include information security roles and responsibilities.

C.Employees receive information security awareness training.

D.The information security function reports to the chief information officer.

Information security governance is PRIMARILY driven by:

A.technology constraints.

B.regulatory requirements.

C.litigation potential.

D.business strategy.

Which of the following is the PRIMARY responsibility of the designated spokesperson during incident response testing?

A.Establishing communication channels throughout the organization

B.Communicating the severity of the incident to the board

C.Acknowledging communications from the incident response team

D.Evaluating the effectiveness of the communication processes

Which of the following is the BEST method to protect consumer private information for an online public website?

A.Use secure encrypted transport layer.

B.Apply a masking policy to the consumer data.

C.Encrypt consumer's data in transit and at rest.

D.Apply strong authentication to online accounts.

Other Version: 1113ISACA.CISM.v2025-02-21.q785; 659ISACA.CISM.v2024-12-21.q371; 15558ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 108Oracle.1z0-1196-25.v2025-09-12.q18; 109NetworkAppliance.NS0-162.v2025-09-12.q86; 149OCEG.GRCP.v2025-09-11.q211; 110HP.HPE0-V27.v2025-09-11.q78; 125Oracle.1Z0-1057-23.v2025-09-10.q47; 165Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 140SAP.C-S4EWM-2023.v2025-09-08.q83; 183TheSecOpsGroup.CNSP.v2025-09-08.q20; 273CFAInstitute.ESG-Investing.v2025-09-08.q173; 259PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Download PDF File