Free CISM Exam Braindumps
Certified Information Security Manager Questions 626–630 (page: 127)

Updated On: 10-Feb-2026

Which of the following is the BEST way for an information security manager to justify continued investment in the information security program when the organization is facing significant budget cuts?

  1. Demonstrate that the program enables business activities
  2. Demonstrate an increase in ransomware attacks targeting peer organizations
  3. Demonstrate that implemented program controls are effective
  4. Demonstrate the readiness of business continuity plans

Answer(s): A



Which of the following is the MOST important consideration when designing information security architecture?

  1. Risk management parameters for the organization are defined.
  2. The information security architecture is aligned with industry standards.
  3. The level of security supported is based on business decisions.
  4. The existing threat landscape is monitored.

Answer(s): C



Which of the following processes if the FIRST step in establishing an information security policy?

  1. Security controls evaluation
  2. Information security audit
  3. Review of current global standards
  4. Business risk assessment

Answer(s): D



A company has purchased a rival organization and is looking to integrate security strategies. Which of the following is the GREATEST issue to consider?

  1. The organizations have different risk appetites
  2. Differing security technologies
  3. Differing security skills within the organizations
  4. Confidential information could be leaked

Answer(s): A



Which of the following is the BEST metric for evaluating the effectiveness of an intrusion detection mechanism?

  1. Number of attacks detected
  2. Number of successful attacks
  3. Ratio of false positives to false negatives
  4. Ratio of successful to unsuccessful attacks

Answer(s): C

Explanation:

The ratio of false positives to false negatives will indicate whether an intrusion detection system (IDS) is properly tuned to minimize the number of false alarms while, at the same time, minimizing the number of omissions. The number of attacks detected, successful attacks or the ratio of successful to unsuccessful attacks would not indicate whether the IDS is properly configured.



Viewing page 127 of 345
Viewing questions 631 - 635 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!