Isaca CISM Exam - Topic 1 Question 11 Discussion

Actual exam question for Isaca's CISM exam

Question #: 11
Topic #: 1

[All CISM Questions]

An internal security audit has reported that authentication controls are not operating effectively. Which of the following is MOST important to c management?

AThe impact of the control weakness on the risk profile of the organization

BThe results of a business impact analysis (BIA)

CA business case for implementing stronger authentication controls

DAn analysis of the impact of this type of control weakness on other organizations

Show Suggested Answer

Suggested Answer: A

by Lavonda at May 07, 2022, 10:51 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Wilda

4 months ago

Wait, are we really not effective at authentication? That's shocking!

upvoted 0 times

...

Carmela

4 months ago

D seems a bit off, why compare to others?

upvoted 0 times

...

Chantell

4 months ago

C makes sense too, need a solid case for stronger controls.

upvoted 0 times

...

Lashawnda

4 months ago

I think B is more important, gotta know the business impact first.

upvoted 0 times

...

Lanie

5 months ago

Definitely A, the risk profile is key!

upvoted 0 times

...

Viva

5 months ago

I feel like option D might be less important since management usually focuses on their own organization rather than others, but I could be wrong.

upvoted 0 times

...

Kip

5 months ago

I practiced a question similar to this where the focus was on justifying security investments, so I wonder if C could be the right choice here.

upvoted 0 times

...

Howard

5 months ago

I remember discussing how the risk profile is crucial for management decisions, so I think option A might be the most important.

upvoted 0 times

...

Micaela

5 months ago

I'm not entirely sure, but I think a business impact analysis could help show the potential losses, which might make option B relevant too.

upvoted 0 times

...

I'm not sure about the details here. I know the AIS user sessions are related to the HTML server, but I can't recall exactly how they are displayed in Server Manager. I'll need to review this topic carefully before the exam.

upvoted 0 times

...

Silvana

5 months ago

Hmm, I'm a bit unsure about this one. There are a few different tactics mentioned, and I'm not sure which ones would be the most effective. I'll need to think through the pros and cons of each approach.

upvoted 0 times

...

Pearly

5 months ago

Hmm, this seems like a straightforward question about console-based applications. I'll need to think carefully about the differences between input and output streams.

upvoted 0 times

...