Free Access ISACA.CISM.v2024-12-21.q371 Practice Test (Page 40)

What is the FIRST line of defense against criminal insider activities?

A.Monitoring employee activities

B.Validating the integrity of personnel

C.stringent and enforced access controls

D.Signing security agreements by critical personnel

Which of the following is MOST important for measuring the effectiveness of a security awareness program?

A.Reduced number of security violation reports

B.A quantitative evaluation to ensure user comprehension

C.Increased interest in focus groups on security issues

D.Increased number of security violation reports

Which of the following BEST indicates an effective vulnerability management program?

A.Vulnerabilities are reported in a timely manner.

B.Threats are identified accurately.

C.Risks are managed within acceptable limits.

D.Vulnerabilities are managed proactively.

An incident response policy must contain:

A.updated call trees.

B.escalation criteria.

C.press release templates.

D.critical backup files inventory.

The PRIMARY purpose of a security information and event management (SIEM) system is to:

A.provide status of incidents

B.identify potential incidents.

C.resolve incidents

D.track ongoing incidents

Other Version: 8745ISACA.CISM.v2025-02-21.q785; 14216ISACA.CISM.v2022-06-26.q752; 17385ISACA.CISM.v2022-03-24.q890; 83ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 281PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 412Nokia.4A0-113.v2026-05-01.q69; 439EC-COUNCIL.312-49v11.v2026-04-30.q214; 396Microsoft.MB-820.v2026-04-30.q101; 273Salesforce.MC-202.v2026-04-30.q57; 322BICSI.INSTC_V8.v2026-04-29.q53; 456NMLS.MLO.v2026-04-28.q82; 299NCARB.Project-Management.v2026-04-28.q27; 543EMC.D-AV-DY-23.v2026-04-27.q184; 1388ServiceNow.CSA.v2026-04-27.q483

Download PDF File