Free CISM Exam Braindumps
Certified Information Security Manager Questions 441–445 (page: 90)

Updated On: 10-Feb-2026

Which of the following BEST promotes stakeholder accountability in the management of information security risks?

  1. Targeted security procedures
  2. Establishment of information ownership
  3. Establishment of security baselines
  4. Regular reviews for noncompliance

Answer(s): B



Which of the following is the BEST control to minimize the risk associated with loss of information as a result of ransomware exploiting a zero-day vulnerability?

  1. A security operation center
  2. A patch management process
  3. A public key infrastructure
  4. A data recovery process

Answer(s): D



Application data integrity risk would be MOST directly addressed by a design that includes:

  1. access control technologies such as role-based entitlements.
  2. strict application of an authorized data dictionary.
  3. application log requirements such as field-level audit trails and user activity logs.
  4. reconciliation routines such as checksums, hash totals, and record counts.

Answer(s): D



Which of the following is the MOST relevant risk factor to an organization when employees use social media?

  1. Social media can be accessed from multiple locations.
  2. Social media offers a platform that can host cyber-attacks.
  3. Social media can be used to gather intelligence for attacks.
  4. Social media increases the velocity of risk and the threat capacity.

Answer(s): C



A PRIMARY advantage of involving business management in evaluating and managing information security risks is that they:

  1. better understand organizational risks.
  2. can balance technical and business risks.
  3. are more objective than security management.
  4. better understand the security architecture.

Answer(s): B



Viewing page 90 of 345
Viewing questions 446 - 450 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!