Free CISM Exam Braindumps
Certified Information Security Manager Questions 476–480 (page: 97)

Updated On: 10-Feb-2026

Which of the following is MOST important to consider when defining control objectives?

  1. The current level of residual risk
  2. The organization’s strategic objectives
  3. Control recommendations from a recent audit
  4. The organization’s risk appetite

Answer(s): B



Which of the following should be the MOST important consideration when reporting sensitive risk-related information to stakeholders?

  1. Ensuring nonrepudiation of communication
  2. Consulting with the public relations director
  3. Transmitting the internal communication securely
  4. Customizing the communication to the audience

Answer(s): C



Conflicting objectives are MOST likely to compromise the effectiveness of the information security process when information security management is:

  1. reporting to the network infrastructure manager.
  2. outside of information technology.
  3. partially staffed by external security consultants.
  4. combined with the change management function.

Answer(s): D



Which of the following is MOST important for an information security manager to ensure when evaluating change requests?

  1. Requests are approved by process owners.
  2. Requests add value to the business.
  3. Residual risk is within risk tolerance.
  4. Contingency plans have been created.

Answer(s): D



Which of the following trends would be of GREATEST concern when reviewing the performance of an organization’s intrusion detection systems (IDS)?

  1. Decrease in false negatives
  2. Increase in false positives
  3. Decrease in false positives
  4. Increase in false negatives

Answer(s): D



Viewing page 97 of 345
Viewing questions 481 - 485 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!