Free Access ISACA.CISM.v2024-12-21.q371 Practice Test (Page 27)

Question 126

A CIO has asked the organization's information security manager to provide both one-year and five-year plans for the information security program. What is the purpose for the long-term plan?

A.To create formal requirements to meet projected security needs for the future

B.To prioritize risks on a longer scale than the one-year plan

C.To create and document a consistent progression of security capabilities

D.To facilitate the continuous improvement of the IT organization

Question 127

Which of the following sources is MOST useful when planning a business-aligned information security program?

A.Information security policy

B.Business impact analysis (BIA)

C.Security risk register

D.Enterprise architecture (EA)

Question 128

Capacity planning would prevent:

A.system downtime for scheduled security maintenance.

B.application failures arising from insufficient hardware resources.

C.software failures arising from exploitation of buffer capacity vulnerabilities.

D.file system overload arising from distributed denial of service (DDoS) attacks.

Question 129

The MOST complete business case for security solutions is one that.

A.includes appropriate justification.

B.explains the current risk profile.

C.details regulatory requirements.

D.identifies incidents and losses.

Question 130

An information security manager has been asked to provide regular status reports to senior management regarding the information security program. Which of the following would provide the MOST helpful information?

A.Number of phishing incidents per month

B.A list detailing the latest threats

C.Remediation activities performed

D.Key performance indicators (KPIs)

Other Version: 8745ISACA.CISM.v2025-02-21.q785; 14216ISACA.CISM.v2022-06-26.q752; 17401ISACA.CISM.v2022-03-24.q890; 83ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 282PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 412Nokia.4A0-113.v2026-05-01.q69; 439EC-COUNCIL.312-49v11.v2026-04-30.q214; 403Microsoft.MB-820.v2026-04-30.q101; 274Salesforce.MC-202.v2026-04-30.q57; 322BICSI.INSTC_V8.v2026-04-29.q53; 457NMLS.MLO.v2026-04-28.q82; 299NCARB.Project-Management.v2026-04-28.q27; 546EMC.D-AV-DY-23.v2026-04-27.q184; 1388ServiceNow.CSA.v2026-04-27.q483

Question 126

Question 127

Question 128

Question 129

Question 130

Download PDF File