Free Access ISACA.CISM.v2022-06-26.q752 Practice Test (Page 7)

Question 26

Due to recent cyber-attacks on industry peers, an organization has decided to create a separate Internal network to reduce the risk of similar attacks. Which of the following should the Information security manager do FIRST?

A.Update security policies and procedures.

B.Evaluate the impact on the business functions.

C.Identify resources required for implementation.

D.Update the risk register to include the network separation

Question 27

In an organization that has undergone an expansion through an acquisition, which of the following would BEST secure the enterprise network?

A.Log analysis of system access

B.Using security groups

C.Encryption of data traversing networks

D.Business or rote-based segmentation

Question 28

Secure customer use of an e-commerce application can BEST be accomplished through:

A.data encryption.

B.digital signatures.

C.strong passwords.

D.two-factor authentication.

Question 29

Which of the following would help management determine the resources needed to mitigate a risk to the organization?

A.Risk analysis process

B.Business impact analysis (BIA)

C.Risk management balanced scorecard

D.Risk-based audit program

Question 30

An organization is considering the purchase of a competitor. To determine the competitor's security posture, the BEST course of action for the organization's information security manager would be to:

A.assess the security policy of the competitor.

B.assess the key technical controls of the competitor.

C.conduct a penetration test of the competitor.

D.perform a security gap analysis on the competitor.

Other Version: 1008ISACA.CISM.v2025-02-21.q785; 619ISACA.CISM.v2024-12-21.q371; 15450ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 156TheSecOpsGroup.CNSP.v2025-09-08.q20; 208CFAInstitute.ESG-Investing.v2025-09-08.q173; 155PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 145Salesforce.Data-Architect.v2025-09-05.q216; 139Adobe.AD0-E605.v2025-09-05.q50; 183Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 26

Question 27

Question 28

Question 29

Question 30

Download PDF File