Free CISM Exam Braindumps
Certified Information Security Manager Questions 706–710 (page: 143)

Updated On: 10-Feb-2026

When evaluating vendors for sensitive data processing, which of the following should be the FIRST step to ensure the correct level of information security is provided?

  1. Include information security clauses in the vendor contract.
  2. Review third-party reports of potential vendors.
  3. Include information security criteria as part of vendor selection.
  4. Develop metrics for vendor performance.

Answer(s): C



In an organization implementing a data classification program, ultimate responsibility for the data on the database server lies with the:

  1. information security manager
  2. business unit manager.
  3. database administrator (DBA).
  4. information technology manager:

Answer(s): A



Which of the following is the MOST effective way for an organization to ensure its third-party service providers are aware of information security requirements and expectations?

  1. Auditing the service delivery of third-party providers
  2. Including information security clauses within contracts
  3. Providing information security training to third-party personnel
  4. Requiring third parties to sign confidentiality agreements

Answer(s): B



Which of the following is MOST important for an information security manager to consider when identifying information security resource requirements?

  1. Information security incidents
  2. Information security strategy
  3. Current resourcing levels
  4. Availability of potential resources

Answer(s): B



Which of the following is the BEST strategy to implement an effective operational security posture?

  1. Threat management
  2. Defense in depth
  3. Increased security awareness
  4. Vulnerability management

Answer(s): B



Viewing page 143 of 345
Viewing questions 711 - 715 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!