Free CISM Exam Braindumps
Certified Information Security Manager Questions 896–900 (page: 181)

Updated On: 10-Feb-2026

Which of the following should be the PRIMARY basis for an information security strategy?

  1. The organization’s vision and mission.
  2. Information security policies.
  3. Results of a comprehensive gap analysis.
  4. Audit and regulatory requirements.

Answer(s): A



Which of the following is an example of a vulnerability?

  1. Natural disasters
  2. Defective software
  3. Ransomware
  4. Unauthorized users

Answer(s): B



What would be an information security manager’s BEST recommendation upon learning that an existing contract with a third party does not clearly identify requirements for safeguarding the organization’s critical data?

  1. Create an addendum to the existing contract.
  2. Cancel the outsourcing contract.
  3. Transfer the risk to the provider.
  4. Initiate an external audit of the provider’s data center.

Answer(s): A



Which of the following is the MOST important reason to monitor information risk on a continuous basis?

  1. The risk profile can change over time.
  2. The effectiveness of controls can be verified.
  3. The cost of controls can be minimized.
  4. Risk assessment errors can be identified.

Answer(s): A



Which of the following is MOST important to include in monthly information security reports to the broad?

  1. Trend analysis of security metrics
  2. Threat intelligence
  3. Root cause analysis of security incidents
  4. Risk assessment results

Answer(s): A



Viewing page 181 of 345
Viewing questions 901 - 905 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!