Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 59)

Question 286

Which of the following is the PRIMARY reason for executive management to be involved in establishing an enterprise's security management framework?

A.To establish the minimum level of controls needed

B.To ensure industry best practices for enterprise security are followed

C.To determine the desired state of enterprise security

D.To satisfy auditors' recommendations for enterprise security

Question 287

Which of the following is the MOST serious exposure of automatically updating virus signature files on every desktop each Friday at 11:00 p.m. (23.00 hrs.)?

A.Most new viruses* signatures are identified over weekends

B.Technical personnel are not available to support the operation

C.Systems are vulnerable to new viruses during the intervening week

D.The update's success or failure is not known until Monday

Question 288

Which of the following is MOST effective in preventing weaknesses from being introduced into existing production systems?

A.Patch management

B.Change management

C.Security baselines

D.Virus detection

Question 289

Which of the following provides the GREATEST assurance that information security is addressed in change management?

A.Requiring senior management sign-off on change management

B.Reviewing changes from a security perspective

C.Performing a security audit on changes

D.Providing security training for change advisory board

Question 290

When developing a protection strategy for outsourcing applications, the information security manager MUST ensure that:

A.escrow agreements are in place.

B.the security requirements are included in the service level agreement (SLA).

C.the responsibility for security is transferred in the service level agreement (SLA).

D.nondisclosure clauses are in the contract.

Other Version: 1113ISACA.CISM.v2025-02-21.q785; 659ISACA.CISM.v2024-12-21.q371; 15558ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 108Oracle.1z0-1196-25.v2025-09-12.q18; 109NetworkAppliance.NS0-162.v2025-09-12.q86; 149OCEG.GRCP.v2025-09-11.q211; 110HP.HPE0-V27.v2025-09-11.q78; 125Oracle.1Z0-1057-23.v2025-09-10.q47; 166Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 140SAP.C-S4EWM-2023.v2025-09-08.q83; 183TheSecOpsGroup.CNSP.v2025-09-08.q20; 274CFAInstitute.ESG-Investing.v2025-09-08.q173; 259PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 286

Question 287

Question 288

Question 289

Question 290

Download PDF File