Free Access ISACA.CISM.v2025-02-21.q785 Practice Test (Page 133)

Question 656

What would be an information security manager's BEST course of action when notified that the implementation of some security controls is being delayed due to budget constraints?

A.Request a budget exception for the security controls

B.Begin the risk acceptance process

C.Suggest less expensive alternative security controls.

D.Prioritize security controls based on risk.

Question 657

Which of the following would provide nonrepudiation of electronic transactions?

A.Two-factor authentication

B.Periodic reaccreditations

C.Third-party certificates

D.Receipt acknowledgment

Question 658

What information is MOST helpful in demonstrating to senior management how information security governance aligns with business objectives?

A.Updates on information security projects in development

B.Drafts of proposed policy changes

C.Metrics of key information security deliverables

D.A list of monitored threats, risks, and exposures

Question 659

Human resources (HR) is evaluating potential Software as a Service (SaaS) cloud services.
Which of the following should the information security manager do FIRST to support this effort?

A.Perform a cost-benefit analysis of using cloud services

B.Conduct a security audit on the cloud service providers

C.Perform a risk assessment of adopting cloud services

D.Review the cloud service providers' control reports

Question 660

A balanced scorecard MOST effectively enables information security:

A.risk management

B.project management

C.governance

D.performance

Other Version: 620ISACA.CISM.v2024-12-21.q371; 12756ISACA.CISM.v2022-06-26.q752; 15503ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 105HP.HPE0-V27.v2025-09-11.q78; 119Oracle.1Z0-1057-23.v2025-09-10.q47; 153Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 135SAP.C-S4EWM-2023.v2025-09-08.q83; 168TheSecOpsGroup.CNSP.v2025-09-08.q20; 235CFAInstitute.ESG-Investing.v2025-09-08.q173; 216PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 154Salesforce.Data-Architect.v2025-09-05.q216; 148Adobe.AD0-E605.v2025-09-05.q50

Question 656

Question 657

Question 658

Question 659

Question 660

Download PDF File