Free Access ISACA.CISM.v2025-02-21.q785 Practice Test (Page 21)

Question 96

There is reason to believe that a recently modified web application has allowed unauthorized access. Which is the BEST way to identify an application backdoor?

A.Black box pen test

B.Security audit

C.Source code review

D.Vulnerability scan

Question 97

Meeting which of the following security objectives BEST ensures that information is protected against unauthorized modification?

A.Authenticity

B.Availability

C.Confidentiality

D.Integrity

Question 98

An information security team is investigating an alleged breach of an organization's network. Which of the following would be the BEST single source of evidence to review?

A.Security information and event management (SIEM) tool

B.File integrity monitoring (FIM) software.

C.Intrusion detection system (IDS)

D.Antivirus software

Question 99

An experienced information security manager joins a new organization and begins by conducting an audit of all key IT processes. Which of the following findings about the vulnerability management program should be of GREATEST concern?

A.Identified vulnerabilities are not logged and resolved in a timely manner.

B.Identified vulnerabilities are not published and communicated in awareness programs.

C.The number of vulnerabilities identified exceeds industry benchmarks. D. Vulnerabilities are identified by internal staff rather than by external consultants.

Question 100

When creating a bring your own device (BYOD) program, it is MOST important to:

A.balance the costs between private versus business usage and define the method to track usage.

B.develop remote wipe capabilities and procedures.

C.ensure the organization's ownership of data and management of the device.

D.establish metrics to evaluate the effectiveness of the program.

Other Version: 2080ISACA.CISM.v2026-06-18.q999; 2733ISACA.CISM.v2024-12-21.q371; 16110ISACA.CISM.v2022-06-26.q752; 19471ISACA.CISM.v2022-03-24.q890; 83ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 186ISQI.CTAL-TAE.v2026-10-06.q38; 145Oracle.1Z0-1079-26.v2026-10-06.q19; 358PRINCE2.PRINCE2-Foundation.v2026-10-05.q391; 184Splunk.SPLK-5002.v2026-10-05.q114; 192Salesforce.Marketing-Cloud-Account-Engagement-Specialist.v2026-10-05.q121; 248Salesforce.Certified-Business-Analyst.v2026-10-05.q199; 225ServiceNow.CAD.v2026-10-05.q256; 161WGU.Introduction-to-IT.v2026-10-03.q47; 252SAP.C_THR81_2605.v2026-10-01.q71; 249Apple.SUP-2026.v2026-10-01.q109

Question 96

Question 97

Question 98

Question 99

Question 100

Download PDF File