Free CISM Exam Braindumps
Certified Information Security Manager Questions 906–910 (page: 183)

Updated On: 10-Feb-2026

Which of the following is MOST important for an information security manager to communicate to senior management regarding the security program?

  1. Potential risks and exposures
  2. Impact analysis results
  3. Security architecture changes
  4. User roles and responsibilities

Answer(s): B



Which of the following is the BEST defense against a brute force attack?

  1. Discretionary access control
  2. Intruder detection lockout
  3. Time-of-day restrictions
  4. Mandatory access control

Answer(s): C



Which of the following would BEST help to ensure an organization’s security program is aligned with business objectives?

  1. Security policies are reviewed and approved by the chief information officer.
  2. The security strategy is reviewed and approved by the organization’s executive committee.
  3. The organization’s board of directors includes a dedicated information security specialist.
  4. Project managers receive annual information security awareness training.

Answer(s): B



Which of the following will MOST effectively minimize the chance of inadvertent disclosure of confidential information?

  1. Following the principle of least privilege
  2. Restricting the use of removable media
  3. Applying data classification rules
  4. Enforcing penalties for security policy violations

Answer(s): C



An organization determines that an end-user has clicked on a malicious link. Which of the following wouldMOST effectively prevent similar situations from recurring?

  1. End-user training
  2. Virus protection
  3. End-user access control
  4. Updated security policies

Answer(s): A



Viewing page 183 of 345
Viewing questions 911 - 915 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!