![\"\"](\"https:\/\/blog.spotodumps.com\/wp-content\/uploads\/2021\/09\/1920-500.png\")
<\/a><\/p>\n01. IT-related risk management activities are MOST effective when they are:<\/b><\/strong><\/p>\n a)<\/b><\/strong>treated as a distinct process<\/p>\n b)<\/b><\/strong>conducted by the IT department<\/p>\n c)<\/b><\/strong>communicated to all employees<\/p>\n d)<\/b><\/strong>integrated within business processes<\/p>\n <\/p>\n 02. A risk assessment and business impact analysis (BIA) have been completed for a major proposed purchase and new process for an organization.<\/b><\/strong><\/p>\n There is disagreement between the information security manager and the business department manager who will be responsible for evaluating the results and identified risk.<\/b><\/strong><\/p>\n Which of the following would be the BEST approach of the information security manager?<\/b><\/strong><\/p>\n a)<\/b><\/strong>Acceptance of the business manager\u2019s decision on the risk to the corporation<\/p>\n b)<\/b><\/strong>Acceptance of the information security manager\u2019s decision on the risk to the corporation<\/p>\n c)<\/b><\/strong>Review of the risk assessment with executive management for final input<\/p>\n d)<\/b><\/strong>Create a new risk assessment and BIA to resolve the disagreement<\/p>\n <\/p>\n 03. Who is accountable for ensuring that information is categorized and that specific protective measures are taken?<\/b><\/strong><\/p>\n a)<\/b><\/strong>The security officer<\/p>\n b)<\/b><\/strong>Senior management<\/p>\n c)<\/b><\/strong>The end user<\/p>\n d)<\/b><\/strong>The custodian<\/p>\n <\/p>\n 04. Abnormal server communication from inside the organization to external parties may be monitored to:<\/b><\/strong><\/p>\n a)<\/b><\/strong>record the trace of advanced persistent threats<\/p>\n b)<\/b><\/strong>evaluate the process resiliency of server operations<\/p>\n c)<\/b><\/strong>verify the effectiveness of an intrusion detection system<\/p>\n d)<\/b><\/strong>support a nonrepudiation framework in e-commerce<\/p>\n <\/p>\n 05. Which of the following is the BEST way to detect an intruder who successfully penetrates a network before significant damage is inflicted?<\/b><\/strong><\/p>\n a)<\/b><\/strong>Perform periodic penetration testing<\/p>\n b)<\/b><\/strong>Establish minimum security baselines<\/p>\n c)<\/b><\/strong>Implement vendor default settings<\/p>\n d)<\/b><\/strong>Install a honeypot on the network<\/p>\n 06. To determine how a security breach occurred on the corporate network, a security manager looks at the logs of various devices.<\/b><\/strong><\/p>\n Which of the following BEST facilitates the correlation and review of these logs?<\/b><\/strong><\/p>\n a)<\/b><\/strong>Database server<\/p>\n b)<\/b><\/strong>Domain name server<\/p>\n c)\u00a0<\/b><\/strong>Time server<\/p>\n d)<\/b><\/strong>Proxy server<\/p>\n <\/p>\n 07. Which of the following authentication methods prevents authentication replay?<\/b><\/strong><\/p>\n a)<\/b><\/strong>Password hash implementation<\/p>\n b)<\/b><\/strong>Challenge\/response mechanism<\/p>\n c)<\/b><\/strong>Wired equivalent privacy encryption usage<\/p>\n d)<\/b><\/strong>Hypertext Transfer Protocol basic authentication<\/p>\n <\/p>\n <\/b>08. In order to protect a network against unauthorized external connections to corporate systems, the information security manager should BEST implement:<\/b><\/strong><\/p>\n a)<\/b><\/strong>a strong authentication.<\/p>\n b)<\/b><\/strong>IP antispoofing filtering.<\/p>\n c)<\/b><\/strong>network encryption protocol.<\/p>\n d)<\/b><\/strong>access lists of trusted devices.<\/p>\n <\/p>\n <\/b>09. Which of the following BEST illustrates residual risk within an organization?<\/b><\/strong><\/p>\n a)<\/b><\/strong>Risk management framework<\/p>\n b)<\/b><\/strong>Risk register<\/p>\n c)<\/b><\/strong>Business impact analysis<\/p>\n d)<\/b><\/strong>Heat map<\/p>\n <\/p>\n 10. The postincident review of a security incident revealed that there was a process that was not monitored. As a result monitoring functionality has been implemented.<\/b><\/strong><\/p>\n Which of the following may BEST be expected from this remediation?<\/b><\/strong><\/p>\n a)<\/b><\/strong>Reduction in total incident duration<\/p>\n b)<\/b><\/strong>Increase in risk tolerance<\/p>\n c)<\/b><\/strong>Facilitation of escalation<\/p>\n d)<\/b><\/strong>Improvement in identification<\/p>\n SPOTO dumps will be the most beneficial option for people who need aid with their preparation. When you take the SPOTO Dumps Exam using our Verified Exam Questions, you\u2019ll notice that every question on the test matches to the SPOTO Dumps.<\/p>\n![\"\"](\"https:\/\/blog.spotodumps.com\/wp-content\/uploads\/2021\/05\/\u6309\u94ae-get-100-pass-dumps.gif\")
<\/a><\/p>\nISACA CISM Sample Questions:<\/b><\/strong><\/h2>\n
![\"\"](\"https:\/\/blog.spotodumps.com\/wp-content\/uploads\/2021\/10\/1920-500-1.png\")
<\/a><\/p>\nAnswers:<\/b><\/strong><\/h2>\n
\n\n
\n Question: 01
\nAnswer: d<\/td>\nQuestion: 02
\nAnswer: c<\/td>\nQuestion: 03
\nAnswer: b<\/td>\nQuestion: 04
\nAnswer: a<\/td>\nQuestion: 05
\nAnswer: d<\/td>\n<\/tr>\n\n Question: 06
\nAnswer: c<\/td>\nQuestion: 07
\nAnswer: b<\/td>\nQuestion: 08
\nAnswer: a<\/td>\nQuestion: 09
\nAnswer: a<\/td>\nQuestion: 10
\nAnswer: d<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/a><\/p>\nLatest SPOTO Candidates Pass Feedback<\/strong><\/h2>\n