Free Access ISACA.CISM.v2025-02-21.q785 Practice Test (Page 103)

Question 506

Which of the following is MOST helpful in determining an organization's current capacity to mitigate risks?

A.IT security risk and exposure

B.Business impact analysis (BIA)

C.Capability maturity model

D.Vulnerability assessment

Question 507

Which of the following BEST minimizes information security risk in deploying applications to the production environment?

A.Having a well-defined change process

B.Integrating security controls in each phase of the life cycle

C.Verifying security during the testing process

D.Conducting penetration testing post implementation

Question 508

Which of the following is the PRIMARY purpose of red team testing?

A.To confirm the risk profile of the organization

B.To determine the organization s preparedness for an attack

C.To establish a baseline incident response program

D.To assess the vulnerability of employees to social engineering

Question 509

A critical device is delivered with a single user and password that is required to be shared for multiple users to access the device. An information security manager has been tasked with ensuring all access to the device is authorized. Which of the following would be the MOST efficient means to accomplish this?

A.Enable access through a separate device that requires adequate authentication

B.Implement manual procedures that require password change after each use

C.Request the vendor to add multiple user IDs

D.Analyze the logs to detect unauthorized access

Question 510

The GREATEST benefit of choosing a private cloud over a public cloud would be:

A.server protection.

B.collection of data forensics.

C.online service availability.

D.containment of customer data.

Other Version: 659ISACA.CISM.v2024-12-21.q371; 12799ISACA.CISM.v2022-06-26.q752; 15546ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 108Oracle.1z0-1196-25.v2025-09-12.q18; 107NetworkAppliance.NS0-162.v2025-09-12.q86; 147OCEG.GRCP.v2025-09-11.q211; 108HP.HPE0-V27.v2025-09-11.q78; 124Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 138SAP.C-S4EWM-2023.v2025-09-08.q83; 183TheSecOpsGroup.CNSP.v2025-09-08.q20; 263CFAInstitute.ESG-Investing.v2025-09-08.q173; 252PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 506

Question 507

Question 508

Question 509

Question 510

Download PDF File