Free CISM Exam Braindumps
Certified Information Security Manager Questions 376–380 (page: 77)

Updated On: 10-Feb-2026

An information security manager finds that a soon-to-be deployed online application will increase risk beyond acceptable levels, and necessary controls have not been included. Which of the following is the BEST course of action for the information security manager?

  1. Present a business case for additional controls to senior management.
  2. Instruct IT to deploy controls based on urgent business needs.
  3. Solicit bids for compensating control products.
  4. Recommend a different application.

Answer(s): A



Which of the following is the GREATEST risk of single sign-on?

  1. It is a single point of failure for an enterprise access control process.
  2. Password carelessness by one user may render the entire infrastructure vulnerable.
  3. Integration of single sign-on with the rest of the infrastructure is complicated.
  4. One administrator maintains the single sign-on solutions without segregation of duty.

Answer(s): A



Which of the following is the MOST important reason for performing a risk analysis?

  1. Assigning the appropriate level of protection
  2. Identifying critical information assets
  3. Identifying and eliminating threats
  4. Promoting increased security awareness in the organization

Answer(s): A



Deciding the level of protection a particular asset should be given in BEST determined by:

  1. a threat assessment.
  2. a vulnerability assessment.
  3. a risk analysis.
  4. the corporate risk appetite.

Answer(s): C



A risk profile supports effective security decisions PRIMARILY because it:

  1. defines how to best mitigate future risks.
  2. identifies priorities for risk reduction.
  3. enables comparison with industry best practices.
  4. describes security threats.

Answer(s): B



Viewing page 77 of 345
Viewing questions 381 - 385 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!