Free CISM Exam Braindumps
Certified Information Security Manager Questions 886–890 (page: 179)

Updated On: 10-Feb-2026

Which of the following is the MOST effective method to prevent a SQL injection in an employee portal?

  1. Reconfigure the database schema
  2. Enforce referential integrity on the database
  3. Conduct code reviews
  4. Conduct network penetration testing

Answer(s): B



Which of the following is MOST important when conducting a forensic investigation?

  1. Documenting analysis steps
  2. Capturing full system images
  3. Maintaining a chain of custody
  4. Analyzing system memory

Answer(s): C



Which of the following would be the information security manager’s BEST course of action to gain approval for investment in a technical control?

  1. Perform a cost-benefit analysis.
  2. Conduct a risk assessment.
  3. Calculate the exposure factor.
  4. Conduct a business impact analysis (BIA).

Answer(s): D



Which of the following is the BEST indication of information security strategy alignment with the business?

  1. Number of business objectives directly supported by information security initiatives.
  2. Percentage of corporate budget allocated to information security initiatives.
  3. Number of business executives who have attended information security awareness sessions.
  4. Percentage of information security incidents resolved within defined service level agreements.

Answer(s): A



When customer data has been compromised, an organization should contact law enforcement authorities:

  1. if the attack comes from an international source.
  2. when directed by the information security manager.
  3. if there is potential impact to the organization.
  4. in accordance with the corporate communication policy.

Answer(s): D



Viewing page 179 of 345
Viewing questions 891 - 895 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!