CISM Exam Questions and Answers | Exam-Dumps (Page: 18)

QUESTION: 86

Which of the following is the MOST important to keep in mind when assessing the value of information?

The potential financial loss
The cost of recreating the information
The cost of insurance coverage
Regulatory requirement

Answer(s): A

Explanation:

The potential for financial loss is always a key factor when assessing the value of information. Choices B, C and D may be contributors, but not the key factor.

Reveal Solution Next Question

QUESTION: 87

What would a security manager PRIMARILY utilize when proposing the implementation of a security solution?

Risk assessment report
Technical evaluation report
Business case
Budgetary requirements

Answer(s): C

Explanation:

The information security manager needs to prioritize the controls based on risk management and the requirements of the organization. The information security manager must look at the costs of the various controls and compare them against the benefit the organization will receive from the security solution. The information security manager needs to have knowledge of the development of business cases to illustrate the costs and benefits of the various controls. All other choices are supplemental.

Reveal Solution Next Question

QUESTION: 88

To justify its ongoing security budget, which of the following would be of MOST use to the information security' department?

Security breach frequency
Annualized loss expectancy (ALE)
Cost-benefit analysis
Peer group comparison

Answer(s): C

Explanation:

Cost-benefit analysis is the legitimate way to justify budget. The frequency of security breaches may assist the argument for budget but is not the key tool; it does not address the impact. Annualized loss expectancy (ALE) does not address the potential benefit of security investment. Peer group comparison would provide a good estimate for the necessary security budget but it would not take into account the specific needs of the organization.

Reveal Solution Next Question

QUESTION: 89

Which of the following situations would MOST inhibit the effective implementation of security governance?

The complexity of technology
Budgetary constraints
Conflicting business priorities
High-level sponsorship

Answer(s): D

Explanation:

The need for senior management involvement and support is a key success factor for the implementation of appropriate security governance. Complexity of technology, budgetary constraints and conflicting business priorities are realities that should be factored into the governance model of the organization, and should not be regarded as inhibitors.

Reveal Solution Next Question

QUESTION: 90

What would be the MOST significant security risks when using wireless local area network (LAN) technology?

Man-in-the-middle attack
Spoofing of data packets
Rogue access point
Session hijacking

Answer(s): C

Explanation:

A rogue access point masquerades as a legitimate access point. The risk is that legitimate users may connect through this access point and have their traffic monitored. All other choices are not dependent on the use of a wireless local area network (LAN) technology.

Reveal Solution Next Question

ISACA CISM Exam (page: 18) ISACA Certified Information Security Manager Updated on: 25-Dec-2025

QUESTION: 86

Explanation:

QUESTION: 87

Explanation:

QUESTION: 88

Explanation:

QUESTION: 89

Explanation:

QUESTION: 90

Explanation:

ISACA CISM Exam (page: 18)
ISACA Certified Information Security Manager
Updated on: 25-Dec-2025