An organization has identified an increased threat of external brute force attacks in its environment. Which of the following is the MOST effective way to mitigate this risk to the organization's critical systems?
Answer(s): B
Determining the risk for a particular threat/vulnerability pair before controls are applied can be expressed as:
Which of the following BEST protects against phishing attacks?
Answer(s): C
For which of the following is it MOST important that system administrators be restricted to read-only access?
Answer(s): D
A business manager has decided not to implement a control based on the risk assessment of a mission-critical business application because of its impact on performance. What is the information security manager's BEST course of action?
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.