Free Access ISACA.CISM.v2024-12-21.q371 Practice Test (Page 19)

Question 86

Which of the following is the BEST method for ensuring that security procedures and guidelines are known and understood?

A.Periodic focus group meetings

B.Periodic compliance reviews

C.Computer-based certification training (CBT)

D.Employee's signed acknowledgement

Question 87

Which of the following would BEST prepare an information security manager for regulatory reviews?

A.Assign an information security administrator as regulatory liaison

B.Perform self-assessments using regulatory guidelines and reports

C.Assess previous regulatory reports with process owners input

D.Ensure all regulatory inquiries are sanctioned by the legal department

Question 88

Which of the following is the MOST important to ensure a successful recovery?

A.Backup media is stored offsite

B.Recovery location is secure and accessible

C.More than one hot site is available

D.Network alternate links are regularly tested

Question 89

An organization wants to integrate information security into its human resource management processes.
Which of the following should be the FIRST step?

A.Evaluate the cost of information security integration

B.Assess the business objectives of the processes

C.Identify information security risk associated with the processes

D.Benchmark the processes with best practice to identify gaps

Question 90

An organization's outsourced firewall was poorly configured and allowed unauthorized access that resulted in downtime of 48 hours. Which of the following should be the information security manager's NEXT course of action?

A.Reconfigure the firewall in accordance with best practices.

B.Obtain supporting evidence that the problem has been corrected.

C.Revisit the contract and improve accountability of the service provider.

D.Seek damages from the service provider.

Other Version: 1092ISACA.CISM.v2025-02-21.q785; 12791ISACA.CISM.v2022-06-26.q752; 15537ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 104Oracle.1z0-1196-25.v2025-09-12.q18; 103NetworkAppliance.NS0-162.v2025-09-12.q86; 144OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 180TheSecOpsGroup.CNSP.v2025-09-08.q20; 254CFAInstitute.ESG-Investing.v2025-09-08.q173; 240PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 86

Question 87

Question 88

Question 89

Question 90

Download PDF File