Free CISM Exam Braindumps
Certified Information Security Manager Questions 711–715 (page: 144)

Updated On: 10-Feb-2026

What should be the PRIMARY basis for establishing a recovery time objective (RTO) for a critical business application?

  1. Business impact analysis (BIA) results
  2. Related business benchmarks
  3. Risk assessment results
  4. Legal and regulatory requirements

Answer(s): A



Which of the following BEST supports the alignment of information security with business functions?

  1. Creation of a security steering committee
  2. IT management support of security assessments
  3. Business management participation in security penetration tests
  4. A focus on technology security risk within business processes

Answer(s): A



Which of the following security characteristics is MOST important to the protection of customer data in an online transaction system?

  1. Availability
  2. Data segregation
  3. Audit monitoring
  4. Authentication

Answer(s): D



Which of the following MUST be established before implementing a data loss prevention (DLP) system?

  1. Privacy impact assessment
  2. A data backup policy
  3. Data classification
  4. A data recovery policy

Answer(s): C



An IT department plans to migrate an application to the public cloud. Which of the following is the information security manager's MOST important action in support of this initiative?

  1. Calculate security implementation costs.
  2. Evaluate service level agreements (SLAs).
  3. Provide cloud security requirements.
  4. Review cloud provider independent assessment reports.

Answer(s): B



Viewing page 144 of 345
Viewing questions 716 - 720 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!