Which of the following is the MOST practical control that an organization can implement to prevent unauthorized downloading of data to universal serial bus (USB) storage devices?
Answer(s): B
Which of the following is the BEST method to determine whether an information security program meets an organization’s business objectives?
Answer(s): A
What is the BEST course of action when an information security manager finds an external service provider has not implemented adequate controls for safeguarding the organization’s critical data?
A PRIMARY purpose of creating security policies is to:
Which of the following should be the PRIMARY consideration for an information security manager when designing security controls for a newly acquired business application?
Answer(s): C
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.