ExamGecko
Login
Home / Isaca / CISM / List of questions
Ask Question

Isaca CISM Practice Test - Questions Answers, Page 55

Add to Whishlist

List of questions

Question 541

Report Export Collapse

Which of the following is the BEST indicator of the maturity level of a vendor risk management process?

Become a Premium Member for full access
  Unlock Premium Member

Question 542

Report Export Collapse

Which of the following should be the PRIMARY focus of a status report on the information security program to senior management?

Become a Premium Member for full access
  Unlock Premium Member

Question 543

Report Export Collapse

Which of the following is the BEST indication that an organization has integrated information security governance with corporate governance?

Become a Premium Member for full access
  Unlock Premium Member

Question 544

Report Export Collapse

Which of the following is the PRIMARY objective of a cyber resilience strategy?

Become a Premium Member for full access
  Unlock Premium Member

Question 545

Report Export Collapse

Which of the following would BEST demonstrate the status of an organization's information security program to the board of directors?

Become a Premium Member for full access
  Unlock Premium Member

Question 546

Report Export Collapse

When testing an incident response plan for recovery from a ransomware attack, which of the following is MOST important to verify?

Become a Premium Member for full access
  Unlock Premium Member

Question 547

Report Export Collapse

Which of the following elements of a service contract would BEST enable an organization to monitor the information security risk associated with a cloud service provider?

Become a Premium Member for full access
  Unlock Premium Member

Question 548

Report Export Collapse

The PRIMARY purpose for continuous monitoring of security controls is to ensure:

Become a Premium Member for full access
  Unlock Premium Member

Question 549

Report Export Collapse

Which of the following is the MOST effective way to ensure the security of services and solutions delivered by third-party vendors?

Become a Premium Member for full access
  Unlock Premium Member

Question 550

Report Export Collapse

Who has the PRIMARY authority to decide if additional risk treatments are required to mitigate an identified risk?

Become a Premium Member for full access
  Unlock Premium Member
Total 801 questions
Go to page: of 81
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which of the following BEST facilitates the effective execution of an incident response plan?
Which of the following BEST enables an incident response team to determine appropriate actions during an initial investigation?
Which of the following BEST demonstrates that an anti-phishing campaign is effective?
What should a global information security manager do FIRST when informed that a new regulation with significant impact will go into effect soon?
What should an information security manager verify FIRST when reviewing an information asset management program?
Which of the following is the BEST approach to incident response for an organization migrating to a cloud-based solution?
The GREATEST challenge when attempting data recovery of a specific file during forensic analysis is when:
Which of the following roles is BEST suited to validate user access requirements during an annual user access review?
When remote access to confidential information is granted to a vendor for analytic purposes, which of the following is the MOST important security consideration?
Several months after the installation of a new firewall with intrusion prevention features to block malicious activity, a breach was discovered that came in through the firewall shortly after installation. This breach could have been detected earlier by implementing firewall: