Free CISM Exam Braindumps
Certified Information Security Manager Questions 801–805 (page: 162)

Updated On: 10-Feb-2026

When implementing information security in system development projects, which of the following is the MOSTeffective approach for an information security manager with limited resources?

  1. Embedding a representative in business projects
  2. Assigning resources based on the business impact
  3. Presenting security requirements during project planning
  4. Reviewing security requirements prior to development

Answer(s): B



Which of the following is the PRIMARY role of the information security manager in application development? To ensure:

  1. enterprise security controls are implemented.
  2. compliance with industry best practice.
  3. control procedures address business risk.
  4. security is integrated into the system development life cycle (SDLC).

Answer(s): A



Which of the following is MOST helpful in securing funding for a commercial vulnerability assessment tool?

  1. Explaining the business value of vulnerability remediation
  2. Identifying applicable legal and regulatory requirements
  3. Presenting a vulnerability scan report for current business systems
  4. Developing security metrics linked to business objectives

Answer(s): A



During which stage of the software development life cycle (SDLC) should application security controls FIRSTbe addressed?

  1. Software code development
  2. Configuration management
  3. Application system design
  4. Requirements gathering

Answer(s): D



Which of the following would be MOST helpful to identify security incidents in a timely manner?

  1. Implement a ticketing system for the help desk
  2. Require security staff to attend training
  3. Develop a user awareness program
  4. Perform regular penetration testing

Answer(s): C



Viewing page 162 of 345
Viewing questions 806 - 810 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!