Free CISM Exam Braindumps
Certified Information Security Manager Questions 921–925 (page: 186)

Updated On: 10-Feb-2026

Which of the following is the BEST method to defend against social engineering attacks?

  1. Periodically perform antivirus scans to identify malware.
  2. Communicate guidelines to limit information posted to public sites.
  3. Employ the use of a web-content filtering solution.
  4. Monitor for unauthorized access attempts and failed logins.

Answer(s): C



A validated patch to address a new vulnerability that may affect a mission-critical server has been released. What should be done immediately?

  1. Add mitigating controls.
  2. Take the server off-line and install the patch.
  3. Check the server’s security and install the patch.
  4. Conduct an impact analysis.

Answer(s): D



Which of the following is MOST helpful to maintain cohesiveness within an organization’s information security resource?

  1. Information security architecture
  2. Security gap analysis
  3. Business impact analysis
  4. Information security steering committee

Answer(s): A



During a review to approve a penetration test plan, which of the following should be an information security manager’s PRIMARY concern?

  1. Penetration test team’s deviation from scope
  2. Unauthorized access to administrative utilities
  3. False positive alarms to operations staff
  4. Impact on production systems

Answer(s): D



Which of the following is MOST relevant for an information security manager to communicate to IT operations?

  1. The level of inherent risk
  2. Vulnerability assessments
  3. Threat assessments
  4. The level of exposure

Answer(s): B



Viewing page 186 of 345
Viewing questions 926 - 930 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!