Free CISM Exam Braindumps
Certified Information Security Manager Questions 856–860 (page: 173)

Updated On: 10-Feb-2026

Which of the following will BEST enable an effective information asset classification process?

  1. Reviewing the recovery time objective (RTO) requirements of the asset
  2. Analyzing audit findings
  3. Including security requirements in the classification process
  4. Assigning ownership

Answer(s): C



Which of the following devices, when placed in a demilitarized zone (DMZ), would be considered the MOSTsignificant exposure?

  1. Proxy server
  2. Mail relay server
  3. Application server
  4. Database server

Answer(s): D



Which of the following should be the MOST important criteria when defining data retention policies?

  1. Capacity requirements
  2. Audit findings
  3. Regulatory requirements
  4. Industry best practices

Answer(s): C



Within the confidentiality, integrity, and availability (CIA) triad, which of the following activities BEST supports the concept of integrity?

  1. Enforcing service level agreements
  2. Implementing a data classification schema
  3. Ensuring encryption for data in transit
  4. Utilizing a formal change management process

Answer(s): D



A small organization has a contract with a multinational cloud computing vendor. Which of the following would present the GREATEST concern to an information security manager if omitted from the contract?

  1. Authority of the subscriber to approve access to its data
  2. Right of the subscriber to conduct onsite audits of the vendor
  3. Escrow of software code with conditions for code release
  4. Comingling of subscribers’ data on the same physical server

Answer(s): D



Viewing page 173 of 345
Viewing questions 861 - 865 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!