Free Access ISACA.CISM.v2025-02-21.q785 Practice Test (Page 48)

Question 231

What is the BEST method to confirm that all firewall rules and router configuration settings are adequate?

A.Periodic review of network configuration

B.Review intrusion detection system (IDS) logs for evidence of attacks

C.Periodically perform penetration tests

D.Daily review of server logs for evidence of hacker activity

Question 232

Which of the following would BEST assist an IS manager in gaining strategic support from executive management?

A.Annual report of security incidents within the organization

B.Research on trends in global information security breaches

C.Rating of the organization's security, based on international standards

D.Risk analysis specific to the organization

Question 233

Which of the following BEST enables the restoration of operations after a limited ransomware incident occurs?

A.Reliable image backups

B.Documented eradication procedures

C.Impact assessment

D.Root cause analysis

Question 234

An organization rolled out information security awareness training and wants to perform an end-ot-year assessment to determine the program's success. Which of the following would be the BEST indicator of the program's effectiveness?

A.An increase in the number of security-related inquiries to the help desk

B.An increase in the number of positive comments in trainee feedback surveys

C.An increase in the number of security incidents throughout the organization

D.An increase in the number of employees completing training in a timely manner

Question 235

Which of the following is the MOST appropriate use of gap analysis?

A.Evaluating a business impact analysis (BIA)

B.Developing a balanced business scorecard

C.Demonstrating the relationship between controls

D.Measuring current state vs. desired future state

Other Version: 659ISACA.CISM.v2024-12-21.q371; 12793ISACA.CISM.v2022-06-26.q752; 15542ISACA.CISM.v2022-03-24.q890; 79ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 107Oracle.1z0-1196-25.v2025-09-12.q18; 106NetworkAppliance.NS0-162.v2025-09-12.q86; 145OCEG.GRCP.v2025-09-11.q211; 107HP.HPE0-V27.v2025-09-11.q78; 123Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 137SAP.C-S4EWM-2023.v2025-09-08.q83; 181TheSecOpsGroup.CNSP.v2025-09-08.q20; 260CFAInstitute.ESG-Investing.v2025-09-08.q173; 248PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 231

Question 232

Question 233

Question 234

Question 235

Download PDF File