Free CISM Exam Braindumps
Certified Information Security Manager Questions 821–825 (page: 166)

Updated On: 10-Feb-2026

The information security team has determined an additional security solution is needed to enhance the organization's security posture. What should the information security manager do NEXT to move forward with this initiative?

  1. Evaluate available products
  2. Create a business case
  3. Proceed with vendor selection
  4. Initiate vendor due-diligence

Answer(s): B



Without prior approval, a training department enrolled the company in a free cloud-based collaboration site and invited employees to use it. Which of the following is the BEST response of the information security manager?

  1. Conduct a risk assessment and develop an impact analysis.
  2. Update the risk register and review the information security strategy.
  3. Report the activity to senior management.
  4. Allow temporary use of the site and monitor for data leakage.

Answer(s): C



A global organization has developed a strategy to share a customer information database between offices in two countries. In this situation, it is MOST important to ensure:

  1. data sharing complies with local laws and regulations at both locations.
  2. data is encrypted in transit and at rest.
  3. a nondisclosure agreement is signed.
  4. risk coverage is split between the two locations sharing data.

Answer(s): A



Which of the following is MOST likely to reduce the effectiveness of a signature-based intrusion detection system (IDS)?

  1. The activities being monitored deviate from what is considered normal.
  2. The information regarding monitored activities becomes stale.
  3. The pattern of normal behavior changes quickly and dramatically.
  4. The environment is complex.

Answer(s): D



An information security manager is reviewing the impact of a regulation on the organization’s human resources system. The NEXT course of action should be to:

  1. perform a gap analysis of compliance requirements.
  2. assess the penalties for non-compliance.
  3. review the organization’s most recent audit report.
  4. determine the cost of compliance.

Answer(s): A



Viewing page 166 of 345
Viewing questions 826 - 830 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!