New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CISM Exam - Topic 2 Question 33 Discussion

Actual exam question for Isaca's CISM exam
Question #: 33
Topic #: 2
[All CISM Questions]

Which of the following is MOST likely to be included in an enterprise information security policy?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Judy at May 03, 2022, 09:09 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Gaynell
4 months ago
Not sure if A is the most likely, seems too basic for a policy.
upvoted 0 times
...
Alita
4 months ago
Surprised that D isn't mentioned more, monitoring is key!
upvoted 0 times
...
Blair
4 months ago
C is crucial too, can't skip audit trails!
upvoted 0 times
...
Nilsa
4 months ago
I think B is more important, noncompliance needs clear consequences.
upvoted 0 times
...
Anisha
5 months ago
Definitely A, password rules are a must!
upvoted 0 times
...
Eladia
5 months ago
Security monitoring strategy sounds crucial, but I wonder if it's too detailed for an enterprise policy. I guess it depends on the organization.
upvoted 0 times
...
Eloisa
5 months ago
Audit trail review requirements seem like they could be part of a security policy, but I feel like they might be more operational than policy-related.
upvoted 0 times
...
Merlyn
5 months ago
I remember a practice question that emphasized consequences of noncompliance as a key part of security policies. That might be the answer.
upvoted 0 times
...
Jodi
5 months ago
I think password composition requirements are important, but I'm not sure if they belong in the main policy.
upvoted 0 times
...
Donte
5 months ago
Hmm, I'm a bit confused about the persistent storage part. Do we need to create a separate directory for the journal files, or can we just mount the /var/log/journal directory directly?
upvoted 0 times
...
Wei
5 months ago
Okay, I've got this. The question is asking which events the company must notify the NYSE about. Based on the options, it looks like the answer is D - all of the listed events, including changes to the business, officers/directors, and independent accountants. I'm confident that's the right answer.
upvoted 0 times
...
Monroe
5 months ago
I'm leaning towards "Design" because I feel like we're beginning to shape the website's structure. But I still have doubts about whether it could also be "Develop."
upvoted 0 times
...
Maryann
5 months ago
This one seems straightforward - the question is asking about a drug that inhibits xanthine oxidase and affects the metabolism of 6-mercaptopurine. Based on that, I think the answer is B. Allopurinol.
upvoted 0 times
...
Martha
5 months ago
Building risk-free systems? That doesn't sound quite right. I think the focus should be on managing and mitigating risks, not eliminating them entirely. Let me think this through again.
upvoted 0 times
...
Marci
5 months ago
I'm a bit confused on whether the expense should be measured at the grant date fair value or the reporting date fair value. I'll need to review the IFRS 2 guidance carefully.
upvoted 0 times
...

Save Cancel