Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 6)

Question 21

The MOST important success factor to design an effective IT security awareness program is to:

A.customize the content to the target audience.

B.ensure senior management is represented.

C.ensure that all the staff is trained.

D.avoid technical content but give concrete examples.

Question 22

What is the GREATEST risk when there is an excessive number of firewall rules?

A.One rule may override another rule in the chain and create a loophole

B.Performance degradation of the whole network

C.The firewall may not support the increasing number of rules due to limitations

D.The firewall may show abnormal behavior and may crash or automatically shut down

Question 23

When developing security processes for handling credit card data on the business unit's information system, the information security manager should FIRST:

A.review corporate policies regarding credit card information.

B.implement the credit card companies' security requirements.

C.ensure that systems handle credit card data are segmented.

D.review industry's best practices for handling secure payments.

Question 24

Which of the following is the MOST important element to ensure the success of a disaster recovery test at a vendor-provided hot site?

A.Tests are scheduled on weekends

B.Network IP addresses are predefined

C.Equipment at the hot site is identical

D.Business management actively participates

Question 25

When a large organization discovers that it is the subject of a network probe, which of the following actions should be taken?

A.Reboot the router connecting the DMZ to the firewall

B.Power down all servers located on the DMZ segment

C.Monitor the probe and isolate the affected segment

D.Enable server trace logging on the affected segment

Other Version: 1008ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 15450ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 156TheSecOpsGroup.CNSP.v2025-09-08.q20; 208CFAInstitute.ESG-Investing.v2025-09-08.q173; 155PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 145Salesforce.Data-Architect.v2025-09-05.q216; 139Adobe.AD0-E605.v2025-09-05.q50; 183Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 21

Question 22

Question 23

Question 24

Question 25

Download PDF File