Free CISM Exam Braindumps
Certified Information Security Manager Questions 386–390 (page: 79)

Updated On: 10-Feb-2026

Which of the following is the MOST important action when using a web application that has recognized vulnerabilities?

  1. Deploy an application firewall.
  2. Deploy host-based intrusion detection.
  3. Install anti-spyware software.
  4. Monitor application level logs.

Answer(s): A



Which of the following is the MOST effective mitigation strategy to protect confidential information from insider threats?

  1. Performing an entitlement review process
  2. Implementing authentication mechanisms
  3. Defining segregation of duties
  4. Establishing authorization controls

Answer(s): D



Which of the following is the BEST indicator of a successful external intrusion into computer systems?

  1. Unexpected use of protocols within the DMZ.
  2. Unexpected increase of malformed URLs.
  3. Decrease in the number of login failures.
  4. Spikes in the number of login failures.

Answer(s): A



The likelihood of a successful attack is a function of:

  1. incentive and capability of the intruder
  2. opportunity and asset value
  3. threat and vulnerability levels
  4. value and desirability to the intruder

Answer(s): A



A risk mitigation report would include recommendations for:

  1. assessment.
  2. acceptance.
  3. evaluation.
  4. quantification.

Answer(s): B

Explanation:

Acceptance of a risk is an alternative to be considered in the risk mitigation process. Assessment. evaluation and risk quantification are components of the risk analysis process that are completed prior to determining risk mitigation solutions.



Viewing page 79 of 345
Viewing questions 391 - 395 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!