Free CISM Exam Braindumps
Certified Information Security Manager Questions 901–905 (page: 182)

Updated On: 10-Feb-2026

The PRIMARY purpose of vulnerability assessments is to:

  1. determine the impact of potential threats.
  2. test intrusion detection systems (IDS) and response procedures.
  3. provide clear evidence that the system is sufficiently secure.
  4. detect deficiencies that could lead to a system compromise.

Answer(s): D



Which of the following could be detected by a network intrusion detection system (IDS)?

  1. Undocumented open ports
  2. Unauthorized file change
  3. Internally generated attacks
  4. Emailed virus attachments

Answer(s): A



The recovery point objective (RPO) is required in which of the following?

  1. Information security plan
  2. Incident response plan
  3. Business continuity plan
  4. Disaster recovery plan

Answer(s): C



Which of the following is MOST important for an information security manager to verify before conducting full- functional continuity testing?

  1. Risk acceptance by the business has been documented.
  2. Incident response and recovery plans are documented in simple language.
  3. Teams and individuals responsible for recovery have been identified.
  4. Copies of recovery and incident response plans are kept offsite.

Answer(s): C



Which of the following would BEST detect malicious damage arising from an internal threat?

  1. Access control list
  2. Encryption
  3. Fraud awareness training
  4. Job rotation

Answer(s): D



Viewing page 182 of 345
Viewing questions 906 - 910 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!