Online Access Free ISACA.CISM.v2022-04-15.q999 Practice Test (Page 77)

The MAIN reason why asset classification is important to a successful information security program is because classification determines:

A.the priority and extent of risk mitigation efforts.

B.the amount of insurance needed in case of loss.

C.the appropriate level of protection to the asset.

D.how protection levels compare to peer organizations.

Which of the following practices is BEST to remove system access for contractors and other temporary users when it is no longer required?

A.Log all account usage and send it to their manager

B.Establish predetermined automatic expiration dates

C.Require managers to e-mail security when the user leaves

D.Ensure each individual has signed a security acknowledgement

Deciding the level of protection a particular asset should be given is BEST determined by:

A.corporate risk appetite.

B.a risk analysis.

C.a threat assessment.

D.a vulnerability assessment

Which of the following metrics would be considered an accurate measure of an information security program's performance?

A.A combination of qualitative and quantitative trends that enable decision making

B.A collection of qualitative indicators that accurately measure security exceptions

C.The number of key risk indicators (KRIs) identified, monitored, and acted upon

D.A single numeric score derived from various measures assigned to the security program

Which of the following is the MOST appropriate method of ensuring password strength in a large organization?

A.Attempt to reset several passwords to weaker values

B.Install code to capture passwords for periodic audit

C.Sample a subset of users and request their passwords for review

D.Review general security settings on each platform

Other Version: 1971ISACA.CISM.v2024-10-14.q528; 606ISACA.CISM.v2024-07-14.q167; 745ISACA.CISM.v2024-04-24.q336; 1266ISACA.CISM.v2023-09-14.q160; 1233ISACA.CISM.v2023-09-09.q151; 1233ISACA.CISM.v2023-08-22.q180; 1009ISACA.CISM.v2023-07-28.q152; 1045ISACA.CISM.v2023-05-16.q111; 1081ISACA.CISM.v2023-05-10.q114; 1025ISACA.CISM.v2023-03-07.q88; 4425ISACA.CISM.v2022-09-16.q374; 8334ISACA.CISM.v2022-08-01.q522; 56ISACA.Ipassleader.CISM.v2022-06-09.by.josephine.1215q.pdf; 14946ISACA.CISM.v2021-10-30.q999

Latest Upload: 170Microsoft.SC-400.v2025-09-20.q290; 399ISACA.CGEIT.v2025-09-19.q537; 160Fortinet.FCP_FWF_AD-7.4.v2025-09-18.q62; 161Scrum.SAFe-Practitioner.v2025-09-18.q63; 155Workday.Workday-Prism-Analytics.v2025-09-17.q17; 138Oracle.1Z0-1055-24.v2025-09-17.q28; 133Oracle.1Z1-182.v2025-09-17.q32; 266Nutanix.NCP-US-6.5.v2025-09-16.q73; 284Oracle.1z0-071.v2025-09-16.q232; 209Oracle.1Z1-922.v2025-09-16.q125

Download PDF File