Free CISM Exam Braindumps
Certified Information Security Manager Questions 511–515 (page: 104)

Updated On: 10-Feb-2026

Which of the following BEST facilitates the monitoring of risk across an organization?

  1. Penetration testing
  2. Key risk indicators (KRIs)
  3. Threat assessments
  4. Risk appetite trends

Answer(s): B



Which of the following is the BEST way to address risk associated with using an outsourced technology service provider?

  1. Review cyber liability insurance.
  2. Implement a vendor management program.
  3. Require management approval for vendor selection.
  4. Perform due diligence on the provider at contract time.

Answer(s): B



Which of the following is the BEST way for an information security manager to protect against a zero-day attack?

  1. Perform a business impact analysis (BIA).
  2. Conduct vulnerability scans on a daily basis.
  3. Configure daily runs of the virus protection software.
  4. Implement heuristic-based monitoring tools.

Answer(s): D



Which of the following should be determined FIRST when preparing a risk communication plan?

  1. Target audience
  2. Communication channel
  3. Reporting content
  4. Reporting frequency

Answer(s): A



Which of the following is the MOST effective way to mitigate the risk of confidential data leakage to unauthorized stakeholders?

  1. Implement role-based access controls.
  2. Create a data classification policy.
  3. Require the use of login credentials and passwords.
  4. Conduct information security awareness training.

Answer(s): A



Viewing page 104 of 345
Viewing questions 516 - 520 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!