Free CISM Exam Braindumps
Certified Information Security Manager Questions 471–475 (page: 96)

Updated On: 10-Feb-2026

When scoping a risk assessment, assets need to be classified by:

  1. likelihood and impact.
  2. sensitivity and criticality.
  3. threats and opportunities.
  4. redundancy and recoverability.

Answer(s): B



In order to understand an organization’s security posture, it is MOST important for an organization’s senior leadership to:

  1. ensure established security metrics are reported.
  2. review the number of reported security incidents.
  3. assess progress of risk mitigation efforts.
  4. evaluate results of the most recent incident response test.

Answer(s): A



Which is the BEST way for an organization to monitor security risk?

  1. Analyzing key performance indicators (KPIs)
  2. Using external risk intelligence services
  3. Using a dashboard to assess vulnerabilities
  4. Analyzing key risk indicators (KRIs)

Answer(s): D



An awareness program is implemented to mitigate the risk of infections introduced through the use of social media. Which of the following will BEST determine the effectiveness of the awareness program?

  1. A post-awareness program survey
  2. A quiz based on the awareness program materials
  3. A simulated social engineering attack
  4. Employee attendance rate at the awareness program

Answer(s): C



When considering whether to adopt bring your own device (BYOD), it is MOST important for the information security manager to ensure that:

  1. business leaders have an understanding of security risks.
  2. users have read and signed acceptable use agreements.
  3. security controls are applied to each device when joining the network.
  4. the applications are tested prior to implementation.

Answer(s): A



Viewing page 96 of 345
Viewing questions 476 - 480 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!