Free CISM Exam Braindumps
Certified Information Security Manager Questions 841–845 (page: 170)

Updated On: 10-Feb-2026

Of the following, who should have PRIMARY responsibility for assessing the security risk associated with an outsourced cloud provider contract?

  1. Information security manager
  2. Compliance manager
  3. Chief information officer
  4. Service delivery manager

Answer(s): D



Which of the following would BEST provide stakeholders with information to determine the appropriate response to a disaster?

  1. Risk assessment
  2. Vulnerability assessment
  3. Business impact analysis
  4. SWOT analysis

Answer(s): C



The PRIMARY purpose for continuous monitoring of security controls is to ensure:

  1. system availability.
  2. control gaps are minimized.
  3. effectiveness of controls.
  4. alignment with compliance requirements.

Answer(s): C



To prevent computers on the corporate network from being used as part of a distributed denial of service attack, the information security manager should use:

  1. incoming traffic filtering
  2. outgoing traffic filtering
  3. IT security policy dissemination
  4. rate limiting

Answer(s): B



Which of the following is the PRIMARY objective of reporting security metrics to stakeholders?

  1. To identify key controls within the organization
  2. To provide support for security audit activities
  3. To communicate the effectiveness of the security program
  4. To demonstrate alignment to the business strategy

Answer(s): D



Viewing page 170 of 345
Viewing questions 846 - 850 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!