Online Access Free ISACA.CISM.v2024-04-24.q336 Practice Test (Page 56)

CISM Exam Question 271

When conducting a post-incident review, the GREATEST benefit of collecting mean time to resolution (MTTR) data is the ability to:

A.provide metrics for reporting to senior management

B.learn of potential areas of improvement

C.verify compliance with the service level agreement (SLA).

D.reduce the costs of future preventive controls.

CISM Exam Question 272

An organization has decided to conduct a postmortem analysis after experiencing a loss from an information security attack. The PRIMARY purpose of this analysis should be to:

A.prepare for criminal prosecution.

B.document lessons learned.

C.evaluate the impact.

D.update information security policies.

CISM Exam Question 273

Which of the following is the GREATEST

A.It is a single point of failure for an enterprise access control process.

B.Password carelessness by one user may render the entire infrastructure vulnerable.

C.One administrator maintains the single sign-on solutions without segregation of duty.

D.Integration of single sign-on with the rest of the infrastructure is complicated.

CISM Exam Question 274

When collecting admissible evidence, which of the following is the MOST important requirement?

A.Need to know

B.Preserving audit logs

C.Due diligence

D.Chain of custody

CISM Exam Question 275

When an organization and its IT-hosting service provider are establishing a contract with each other, it is MOST important that the contract includes:

A.details of expected security metrics.

B.each party's security responsibilities.

C.penalties for noncompliance with security policy.

D.recovery time objectives (RTOs).

Other Version: 1862ISACA.CISM.v2024-10-14.q528; 597ISACA.CISM.v2024-07-14.q167; 1236ISACA.CISM.v2023-09-14.q160; 1216ISACA.CISM.v2023-09-09.q151; 1215ISACA.CISM.v2023-08-22.q180; 979ISACA.CISM.v2023-07-28.q152; 1043ISACA.CISM.v2023-05-16.q111; 1081ISACA.CISM.v2023-05-10.q114; 1022ISACA.CISM.v2023-03-07.q88; 4368ISACA.CISM.v2022-09-16.q374; 8259ISACA.CISM.v2022-08-01.q522; 56ISACA.Ipassleader.CISM.v2022-06-09.by.josephine.1215q.pdf; 11766ISACA.CISM.v2022-04-15.q999; 14812ISACA.CISM.v2021-10-30.q999

Latest Upload: 257ISACA.CGEIT.v2025-09-19.q537; 153Fortinet.FCP_FWF_AD-7.4.v2025-09-18.q62; 154Scrum.SAFe-Practitioner.v2025-09-18.q63; 146Workday.Workday-Prism-Analytics.v2025-09-17.q17; 131Oracle.1Z0-1055-24.v2025-09-17.q28; 129Oracle.1Z1-182.v2025-09-17.q32; 243Nutanix.NCP-US-6.5.v2025-09-16.q73; 263Oracle.1z0-071.v2025-09-16.q232; 203Oracle.1Z1-922.v2025-09-16.q125; 323CyberArk.PAM-CDE-RECERT.v2025-09-15.q100

CISM Exam Question 271

CISM Exam Question 272

CISM Exam Question 273

CISM Exam Question 274

CISM Exam Question 275

Download PDF File