Free Access ISACA.CISM.v2025-02-21.q785 Practice Test (Page 139)

Question 686

Which of the following would be the GREATEST threat posed by a distributed denial of service (DDoS) attack on a public-facing web server?

A.Unauthorized access to resources

B.Execution of unauthorized commands

C.Defacement of website content

D.Prevention of authorized access

Question 687

Which of the following presents the GREATEST challenge to a security operations center's wna GY of potential security breaches?

A.The patch management system does not deploy patches in a timely manner.

B.IT system clocks are not synchronized with the centralized logging server.

C.Operating systems are no longer supported by the vendor.

D.An organization has a decentralized data center that uses cloud services.

Question 688

What should the information security manager do FIRST when end users express that new security controls are too restrictive?

A.Conduct a business impact analysis (BIA)

B.Obtain process owner buy-in to remove the controls

C.Perform a risk assessment on modifying the control environment

D.Perform a cost-benefit analysis on modifying the control environment

Question 689

An information security manager has noticed a large number of security policy exceptions have been approved by business unit leaders. Which of the following would be the BEST course of action to address this situation?

A.Report the exceptions as a security incident.

B.Ensure that business unit leaders are aware of the relevant risk.

C.Provide security awareness training to business unit leaders more frequently.

D.Revise the security policy to accommodate the exceptions

Question 690

Which of the following BEST helps to ensure a risk response plan will be developed and executed in a timely manner?

A.Assigning a risk owner

B.Establishing risk metrics

C.Reporting on documented deficiencies

D.Training on risk management procedures

Other Version: 2064ISACA.CISM.v2024-12-21.q371; 14651ISACA.CISM.v2022-06-26.q752; 18060ISACA.CISM.v2022-03-24.q890; 83ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 457PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 612Nokia.4A0-113.v2026-05-01.q69; 651EC-COUNCIL.312-49v11.v2026-04-30.q214; 640Microsoft.MB-820.v2026-04-30.q101; 452Salesforce.MC-202.v2026-04-30.q57; 493BICSI.INSTC_V8.v2026-04-29.q53; 624NMLS.MLO.v2026-04-28.q82; 412NCARB.Project-Management.v2026-04-28.q27; 809EMC.D-AV-DY-23.v2026-04-27.q184; 2027ServiceNow.CSA.v2026-04-27.q483

Question 686

Question 687

Question 688

Question 689

Question 690

Download PDF File