Online Access Free ISACA.CISM.v2022-04-15.q999 Practice Test (Page 130)

Which of the following is the BEST indication of an effective information security program?

A.Risk is treated to an acceptable level.

B.Policies are approved by senior management.

C.Key risk indicators (KRIs) are established.

D.Policies and standards are developed.

In a call center, the BEST reason to conduct a social-engineering exercise is to:

A.improve password policy.

B.minimize the likelihood of successful attacks.

C.identify candidates for additional security training.

D.gain funding for information security initiatives.

How would an organization know if its new information security program is accomplishing its goals?

A.Key metrics indicate a reduction in incident impacts.

B.Senior management has approved the program and is supportive of it.

C.Employees are receptive to changes that were implemented.

D.There is an immediate reduction in reported incidents.

Which of the following is the BEST method for ensuring that security procedures and guidelines are known and understood?

A.Periodic focus group meetings

B.Periodic compliance reviews

C.Computer-based certification training (CBT)

D.Employee's signed acknowledgement

Which of the following metrics would be the MOST useful in measuring how well information security is monitoring violation logs?

A.Penetration attempts investigated

B.Violation log reports produced

C.Violation log entries

D.Frequency of corrective actions taken

Other Version: 1968ISACA.CISM.v2024-10-14.q528; 606ISACA.CISM.v2024-07-14.q167; 745ISACA.CISM.v2024-04-24.q336; 1266ISACA.CISM.v2023-09-14.q160; 1233ISACA.CISM.v2023-09-09.q151; 1233ISACA.CISM.v2023-08-22.q180; 1009ISACA.CISM.v2023-07-28.q152; 1045ISACA.CISM.v2023-05-16.q111; 1081ISACA.CISM.v2023-05-10.q114; 1025ISACA.CISM.v2023-03-07.q88; 4425ISACA.CISM.v2022-09-16.q374; 8333ISACA.CISM.v2022-08-01.q522; 56ISACA.Ipassleader.CISM.v2022-06-09.by.josephine.1215q.pdf; 14919ISACA.CISM.v2021-10-30.q999

Latest Upload: 147Microsoft.SC-400.v2025-09-20.q290; 375ISACA.CGEIT.v2025-09-19.q537; 160Fortinet.FCP_FWF_AD-7.4.v2025-09-18.q62; 161Scrum.SAFe-Practitioner.v2025-09-18.q63; 155Workday.Workday-Prism-Analytics.v2025-09-17.q17; 135Oracle.1Z0-1055-24.v2025-09-17.q28; 131Oracle.1Z1-182.v2025-09-17.q32; 261Nutanix.NCP-US-6.5.v2025-09-16.q73; 282Oracle.1z0-071.v2025-09-16.q232; 205Oracle.1Z1-922.v2025-09-16.q125

Download PDF File