Discuss Isaca CISM Exam Topic 1 Question 11

An internal security audit has reported that authentication controls are not operating effectively. Which of the following is MOST important to c management?

AThe impact of the control weakness on the risk profile of the organization

BThe results of a business impact analysis (BIA)

CA business case for implementing stronger authentication controls

DAn analysis of the impact of this type of control weakness on other organizations

Suggested Answer: A

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Wilda 11 months ago

Wait, are we really not effective at authentication? That's shocking!

Carmela 12 months ago

D seems a bit off, why compare to others?

Chantell 12 months ago

C makes sense too, need a solid case for stronger controls.

Lashawnda 12 months ago

I think B is more important, gotta know the business impact first.

Lanie 1 year ago

Definitely A, the risk profile is key!

Viva 1 year ago

I feel like option D might be less important since management usually focuses on their own organization rather than others, but I could be wrong.

Kip 1 year ago

I practiced a question similar to this where the focus was on justifying security investments, so I wonder if C could be the right choice here.

Howard 1 year ago

I remember discussing how the risk profile is crucial for management decisions, so I think option A might be the most important.

Micaela 1 year ago

I'm not entirely sure, but I think a business impact analysis could help show the potential losses, which might make option B relevant too.

Carmela 1 year ago

I'm not sure about the details here. I know the AIS user sessions are related to the HTML server, but I can't recall exactly how they are displayed in Server Manager. I'll need to review this topic carefully before the exam.

Silvana 1 year ago

Hmm, I'm a bit unsure about this one. There are a few different tactics mentioned, and I'm not sure which ones would be the most effective. I'll need to think through the pros and cons of each approach.

Pearly 1 year ago

Hmm, this seems like a straightforward question about console-based applications. I'll need to think carefully about the differences between input and output streams.

Isaca CISM Exam - Topic 1 Question 11 Discussion