Free Access ISACA.CISM.v2024-12-21.q371 Practice Test (Page 3)

Risk management is MOST cost-effective:

A.when performed on a continuous basis.

B.while developing the business case for the security program.

C.at the beginning of security program development.

D.when integrated into other corporate assurance functions.

Reviewing which of the following would BEST ensure that security controls are effective?

A.Risk assessment policies

B.Return on security investment

C.Security metrics

D.User access rights

When customer data has been compromised, an organization should contact law enforcement authorities:

A.if the attack comes from an international source.

B.when directed by the information security manager.

C.if there is potential impact to the organization.

D.in accordance with the corporate communication policy.

When performing a business impact analysis (BIA), who should calculate the recovery time and cost estimates?

A.Business process owner

B.Information security manager

C.Senior management

D.Business continuity coordinator

Which of the following is the MOST important item to consider when evaluating products to monitor security across the enterprise?

A.Ease of installation

B.Product documentation

C.Available support

D.System overhead

Other Version: 1064ISACA.CISM.v2025-02-21.q785; 12765ISACA.CISM.v2022-06-26.q752; 15512ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 106OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 121Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 171TheSecOpsGroup.CNSP.v2025-09-08.q20; 238CFAInstitute.ESG-Investing.v2025-09-08.q173; 225PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 156Salesforce.Data-Architect.v2025-09-05.q216; 150Adobe.AD0-E605.v2025-09-05.q50

Download PDF File