Free CISM Exam Braindumps
Certified Information Security Manager Questions 796–800 (page: 161)

Updated On: 10-Feb-2026

An information security manager is implementing a bring your own device (BYOD) program. Which of the following would BEST ensure that users adhere to the security standards?

  1. Monitor user activities on the network
  2. Publish the standards on the intranet landing page
  3. Establish an acceptable use policy
  4. Deploy a device management solution

Answer(s): D



An organization is in the process of adopting a hybrid data infrastructure, transferring all non-core applications to cloud service providers and maintaining all core business functions in-house. The information security manager has determined a defense in depth strategy should be used. Which of the following BEST describes this strategy?

  1. Multi-factor login requirements for cloud service applications, timeouts, and complex passwords
  2. Deployment of nested firewalls within the infrastructure
  3. Separate security controls for applications, platforms, programs, and endpoints
  4. Strict enforcement of role-based access control (RBAC)

Answer(s): C



When supporting an organization’s privacy officer, which of the following is the information security manager’sPRIMARY role regarding primacy requirements?

  1. Monitoring the transfer of private data
  2. Conducting privacy awareness programs
  3. Ensuring appropriate controls are in place
  4. Determining data classification

Answer(s): C



Which of the following metrics would provide management with the MOST useful information about the progress of a security awareness program?

  1. Increased number of downloads of the organization’s security policy
  2. Increased reported of security incidents
  3. Completion rate of user awareness training within each business unit
  4. Decreased number of security incidents

Answer(s): D



Which of the following is the FIRST step in developing a disaster recovery plan (DRP)?

  1. Perform a business impact analysis (BIA).
  2. Identify potential third-party service providers.
  3. Set a recovery time objective (RTO).
  4. Set a recovery point objective (RPO).

Answer(s): A



Viewing page 161 of 345
Viewing questions 801 - 805 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!