Free CISM Exam Braindumps
Certified Information Security Manager Questions 431–435 (page: 88)

Updated On: 10-Feb-2026

Which of the following is the MOST effective method for categorizing system and data criticality during the risk assessment process?

  1. Interview senior management.
  2. Interview data custodians.
  3. Interview members of the board.
  4. Interview the asset owners.

Answer(s): D



What is the PRIMARY benefit to executive management when audit, risk, and security functions are aligned?

  1. Reduced number of assurance reports
  2. More effective decision making
  3. More timely risk reporting
  4. More efficient incident handling

Answer(s): B



A CEO requests access to corporate documents from a mobile device that does not comply with organizational policy. The information security manager should FIRST:

  1. evaluate a third-party solution.
  2. deploy additional security controls.
  3. evaluate the business risk.
  4. initiate an exception approval process.

Answer(s): C



Which of the following is the MOST important component of a risk profile?

  1. Risk management framework
  2. Data classification results
  3. Penetration test results
  4. Risk assessment methodology

Answer(s): A



Which of the following is MOST helpful for prioritizing the recovery of IT assets during a disaster?

  1. Business impact analysis (BIA)
  2. Risk assessment
  3. Vulnerability assessment
  4. Cost-benefit analysis

Answer(s): A



Viewing page 88 of 345
Viewing questions 436 - 440 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!