Free Access ISACA.CISM.v2026-06-18.q999 Practice Test (Page 179)

Question 886

An organization's information security strategy should be based on:

A.managing risk relative to business objectives.

B.managing risk to a zero level and minimizing insurance premiums.

C.avoiding occurrence of risks so that insurance is not required.

D.transferring most risks to insurers and saving on control costs.

Question 887

Which of the following considerations is MOST important when selecting a third-party intrusion detection system (IDS) vendor?

A.The vendor's proposal aligns with the objectives of the organization.

B.The vendor's proposal allows for escrow in the event the third party goes out of business.

C.The vendor's proposal allows for contract modification during technology refresh cycles.

D.The vendor's proposal requires the provider to have a business continuity plan (BCP).

Question 888

Which of the following processes can be used to remediate identified technical vulnerabilities?

A.Enforcing baseline configurations

B.Performing penetration testing

C.Conducting a risk assessment

D.Updating the business impact analysis (BIA)

Question 889

Which of the following trends would be of GREATEST concern when reviewing the performance of an organization's intrusion detection systems (IDSs)?

A.Increase in false positives

B.Increase in false negatives

C.Decrease in false negatives

D.Decrease in false positives

Question 890

What should be an information security manager's BEST course of action if funding for a security-related initiative is denied by a steering committee?

A.Provide information from industry benchmarks

B.Discuss the initiative with senior management.

C.Document the accepted risk

D.Look for other ways to fund the initiative.

Other Version: 10732ISACA.CISM.v2025-02-21.q785; 2536ISACA.CISM.v2024-12-21.q371; 15488ISACA.CISM.v2022-06-26.q752; 18946ISACA.CISM.v2022-03-24.q890; 83ISACA.Prepawayete.CISM.v2021-09-22.by.maxine.303q.pdf

Latest Upload: 245APICS.CSCP.v2026-09-13.q612; 164ISACA.AAISM.v2026-09-13.q256; 141Adobe.AD0-E911.v2026-09-12.q35; 128Google.ADP.v2026-09-11.q22; 147AIChE.CCPSC.v2026-09-11.q41; 133Scrum.PSPO-III.v2026-09-10.q23; 229Scrum.PSPO-I.v2026-09-09.q157; 195ScaledAgile.SAFe-SPC.v2026-09-08.q108; 152Oracle.1Z0-1033-26.v2026-09-08.q43; 257Pegasystems.PEGACPSSA25V1.v2026-09-08.q144

Question 886

Question 887

Question 888

Question 889

Question 890

Download PDF File